Loading...
Loading...
Found 195 Skills
PHP Web Source Code File Upload Audit Tool. Identify upload entry points and save paths, filename processing and validation logic, detect risks such as arbitrary file upload/path traversal/executable file upload, and output exploitability ratings, PoC and repair suggestions (omission is prohibited).
PHP Web Source Code SQL Injection Vulnerability Audit Tool. Identify all SQL execution points from the source code, analyze injection risks, and output exploitability grading, PoC, and repair suggestions (no omissions allowed).
Security audit tool for CodeIgniter framework. Conducts white-box static audits on CodeIgniter's mechanisms such as CSRF, XSS output filtering, database query construction, routing and validator configuration, session Cookie security, etc., and maps them to a common vulnerability type system (CSRF/AUTH/XSS/SQL/CFG/SESS, etc.).
PHP Web Security Logging and Monitoring Audit Tool. Identifies missing security events, sensitive data written to logs, log injection/forgery risks, and flaws in log and alert links, and outputs exploitability ratings, observable PoCs, and remediation recommendations (no omissions allowed).
PHP Web Source Code Authentication Mechanism Audit Tool. Identify all authentication/authorization implementations from the source code, analyze risks, and output route-authentication mapping and vulnerability analysis (including PoC and repair suggestions).
PHP Web Source Code Encryption and Key Security Audit Tool. Identifies weak hashes/weak encryption/hardcoded keys/signature verification flaws, and outputs severity levels, PoCs and remediation recommendations (omission is prohibited).
PHP Web Business Logic Vulnerability Audit Tool. Identifies logic defects other than authentication/authorization: Mass Assignment, process bypass, race condition, state machine defects, payment/permission timing vulnerabilities, etc., and outputs evidence chains, severity ratings, PoCs and remediation suggestions (no omission allowed).
Security Audit Tool for ThinkPHP Framework Special Features. Conducts white-box static audits on common mechanisms of ThinkPHP such as authentication/CSRF/template escaping/ORM writing (Mass Assignment)/debugging and configuration exposure, and maps to a general vulnerability type system (AUTH/CSRF/TPL/XSS/LOGIC/CFG/SESS/SQL, etc.).
Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents. Use when the user says "audit this codebase", "audit for over-engineering", "what can I delete from this repo", "find bloat", "ponytail-audit", or "/ponytail-audit". One-shot report, does not apply fixes.
A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.
Survey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on source code — never implements, fixes, or refactors anything itself. Use when asked to audit a codebase, find improvement opportunities (bugs, security, performance, test coverage, tech debt, migrations, DX), suggest features or where to take the project next (roadmap, product direction), or generate handoff plans for another agent to implement.
Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting.