Skill Claude CodeCodex
A PHP source-code audit for sessions, login cookies, and JWTs (signed login tokens). It checks how they are created, checked, and kept safe.
400 5mo ago A 59 tokens
Skill Claude CodeCodex
A PHP source-code audit for SQL injection, where attacker-controlled input changes a database query. It identifies SQL execution points and analyzes whether they may be injectable.
400 5mo ago A 53 tokens
Skill Claude CodeCodex
A PHP source-code audit for SSRF, a flaw that makes a server send network requests chosen by a user. It follows user-controlled URLs or addresses into network-request code and checks internal-network, protocol, port, and response restrictions.
400 5mo ago A 64 tokens
Skill Claude CodeCodex
A source-code security audit for Symfony, a PHP web framework. It reviews settings and framework features such as CSRF protection, Twig templates, expressions, and access rules.
400 5mo ago A 76 tokens
Skill Claude CodeCodex
A source-code security audit for ThinkPHP, a PHP web framework. It checks framework features such as authorization, CSRF protection, template escaping, ORM writes, debugging, and configuration exposure.
400 5mo ago A 88 tokens
Skill Claude CodeCodex
A PHP source-code audit for template injection, where an attacker may control a template or template expression. It follows template rendering through to eval or another code-execution path.
400 5mo ago A 68 tokens
Skill Claude CodeCodex
A PHP dependency vulnerability scanner that checks package metadata such as composer.json, composer.lock, or other package information against known vulnerability rules. It produces a report with a framework for examining possible trigger points.
400 5mo ago A 48 tokens
Skill Claude CodeCodex
A static security review tool for WordPress code. It checks how the code handles requests, permissions, input, output, redirects, file uploads, and remote calls, then groups possible weaknesses by common vulnerability types.
400 5mo ago A 84 tokens
Skill Claude CodeCodex
A PHP security-audit skill for finding cross-site scripting (XSS) risks. XSS occurs when untrusted user input is placed into a web page or script and can run as code in another user's browser.
400 5mo ago A 63 tokens
Skill Claude CodeCodex
A PHP security audit tool for finding XML parsing that may allow XXE, a flaw where crafted XML can make an application access unintended files or services. It traces XML input and output and assesses whether the issue can be exploited.
400 5mo ago A 57 tokens
Skill Claude CodeCodex
A static security audit tool for Yii, a PHP web framework, usually referring to Yii2. It checks access control, CSRF protection, input filtering, output encoding, and URL or redirect handling.
400 5mo ago A 81 tokens