CuriousLearnerDev

59 mods across 1 repository, 56 stars between them.

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP web security checker for archive extraction, such as unpacking ZIP files. It checks whether archive paths can escape the intended folder, a problem known as Zip Slip or path traversal.

not rated 56 +1 3mo ago A 72 tokens

php-audit-pipeline

02

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A multi-file PHP web security audit pipeline that coordinates several specialized checks. It uses sink types, meaning risky operations where untrusted data may cause harm, to choose the relevant audits.

not rated 56 +1 3mo ago A 71 tokens

php-auth-audit

03

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP web security checker for authentication and authorization code. Authentication verifies who a user is; authorization controls what that user may access.

not rated 56 +1 3mo ago A 51 tokens

php-cmd-audit

04

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code checker for command injection. It traces user-controlled input into functions that run operating-system commands, such as exec or system.

not rated 56 +1 3mo ago A 61 tokens

php-config-audit

06

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP web configuration security checker. It reviews settings such as cross-origin access rules, error display, debugging, security headers, and risky runtime options.

not rated 56 +1 3mo ago A 58 tokens

php-crlf-audit

07

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP web security checker for CRLF and HTTP response-splitting flaws. These flaws can occur when user input reaches response headers with unsafe line-break characters.

not rated 56 +1 3mo ago A 57 tokens

php-crypto-audit

08

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code checker for cryptography and secret-key safety. It reviews hashing, encryption, embedded keys, and signature verification.

not rated 56 +1 3mo ago A 58 tokens

php-csrf-audit

09

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security review tool for PHP web source code that checks protection against cross-site request forgery (CSRF), an attack that tricks a logged-in user into changing data.

not rated 56 +1 3mo ago A 63 tokens

php-deser-audit

10

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security review tool for PHP web source code that checks for unsafe object deserialization, where data is turned back into PHP objects.

not rated 56 +1 3mo ago A 61 tokens

php-expr-audit

12

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code auditing tool for expression injection, where user-controlled text is evaluated as an expression and may run sensitive operations.

not rated 56 +1 3mo ago A 69 tokens

php-file-read-audit

13

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security audit tool for PHP web source code that checks for arbitrary file reads and path traversal. Path traversal is a flaw that can let someone access files outside the intended folder.

not rated 56 +1 3mo ago A 57 tokens

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security review tool for PHP code that performs file-system operations such as creating, deleting, linking, or changing permissions on files and folders.

not rated 56 +1 3mo ago A 78 tokens

php-laravel-audit

17

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A white-box security-audit skill for Laravel applications. Laravel is a PHP framework, and the audit checks framework-specific areas such as permissions, request forgery protection, sessions, model assignment, and template output.

not rated 56 +1 3mo ago A 78 tokens

php-ldap-audit

18

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A security-audit skill for PHP web source code that checks for LDAP injection. LDAP is a directory system, and injection can happen when user-controlled text changes a directory search or record path.

not rated 56 +1 3mo ago A 61 tokens

php-logging-audit

19

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP security audit tool for application logs and monitoring. It checks whether security events are recorded safely, whether sensitive data is logged, and whether logs and alerts can be forged or fail to work.

not rated 56 +1 3mo ago A 71 tokens

php-logic-audit

20

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code checker for business-logic flaws: mistakes in how an application handles steps, states, payments, or data updates. It covers issues beyond basic login and permission checks.

not rated 56 +1 3mo ago A 73 tokens

php-nosql-audit

21

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code checker for NoSQL injection, where untrusted input changes a document-database query. It focuses on MongoDB or DocumentDB query construction and operators such as `$gt`, `$ne`, and `$where`.

not rated 56 +1 3mo ago A 63 tokens

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code checker for open redirects, where user-controlled input sends a visitor to an unintended website. It follows redirect destinations into `Location` headers and redirect functions and reviews validation and allowlists.

not rated 56 +1 3mo ago A 60 tokens

php-route-mapper

23

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code analyzer that lists web entry routes and their parameters. It produces request templates and a complete parameter list for those routes.

not rated 56 +1 3mo ago A 44 tokens

php-route-tracer

24

CuriousLearnerDev/Online_Tools-AI

Skill Claude CodeCodex

A PHP source-code data-flow tracer that follows a chosen web route from its handler to a final sensitive operation, called a sink. It tracks parameters and variables and reports whether user input can control them, without declaring a vulnerability.

not rated 56 +1 3mo ago A 60 tokens

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: