Skill Claude CodeCodex
A PHP source-code audit for sessions, login cookies, and JWTs (signed login tokens). It checks how they are created, checked, and kept safe.
401
+1 5mo ago A 59 tokens
401Stars on the repository
35Mods indexed here, across every type
5mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
Skill Claude CodeCodex
A PHP source-code audit for SQL injection, where attacker-controlled input changes a database query. It identifies SQL execution points and analyzes whether they may be injectable.
401
+1 5mo ago A 53 tokens
Skill Claude CodeCodex
A PHP source-code audit for SSRF, a flaw that makes a server send network requests chosen by a user. It follows user-controlled URLs or addresses into network-request code and checks internal-network, protocol, port, and response restrictions.
401
+1 5mo ago A 64 tokens
Skill Claude CodeCodex
A source-code security audit for Symfony, a PHP web framework. It reviews settings and framework features such as CSRF protection, Twig templates, expressions, and access rules.
401
+1 5mo ago A 76 tokens
Skill Claude CodeCodex
A source-code security audit for ThinkPHP, a PHP web framework. It checks framework features such as authorization, CSRF protection, template escaping, ORM writes, debugging, and configuration exposure.
401
+1 5mo ago A 88 tokens
Skill Claude CodeCodex
A PHP source-code audit for template injection, where an attacker may control a template or template expression. It follows template rendering through to eval or another code-execution path.
401
+1 5mo ago A 68 tokens
Skill Claude CodeCodex
A PHP dependency vulnerability scanner that checks package metadata such as composer.json, composer.lock, or other package information against known vulnerability rules. It produces a report with a framework for examining possible trigger points.
401
+1 5mo ago A 48 tokens
Skill Claude CodeCodex
A static security review tool for WordPress code. It checks how the code handles requests, permissions, input, output, redirects, file uploads, and remote calls, then groups possible weaknesses by common vulnerability types.
401
+1 5mo ago A 84 tokens
Skill Claude CodeCodex
A PHP security-audit skill for finding cross-site scripting (XSS) risks. XSS occurs when untrusted user input is placed into a web page or script and can run as code in another user's browser.
401
+1 5mo ago A 63 tokens
Skill Claude CodeCodex
A PHP security audit tool for finding XML parsing that may allow XXE, a flaw where crafted XML can make an application access unintended files or services. It traces XML input and output and assesses whether the issue can be exploited.
401
+1 5mo ago A 57 tokens
Skill Claude CodeCodex
A static security audit tool for Yii, a PHP web framework, usually referring to Yii2. It checks access control, CSRF protection, input filtering, output encoding, and URL or redirect handling.
401
+1 5mo ago A 81 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: