Browse Skills — Page 217

PHP Security Patterns

TheBushidoCollective/han

Use when essential PHP security patterns including input validation, SQL injection prevention, XSS protection, CSRF tokens, password hashing, secure session management, and defense-in-depth strategies for building secure PHP applications.

php-audit-pipeline

wgpsec/AboutSecurity

|

php-auth-config-audit

wgpsec/AboutSecurity

|

php-best-practices

HoangNguyen0403/agent-skills-standard

Write PHP following best practices, PSR standards, and code quality guidelines. Use when writing PHP following PSR standards, SOLID principles, or improving code quality.

php-bypass

wgpsec/AboutSecurity

PHP 安全特性绕过：disable_functions 和 open_basedir 限制突破。当已获取 webshell 但命令执行函数被禁用或文件操作被 open_basedir 限制时使用

php-concurrency

HoangNguyen0403/agent-skills-standard

Implement concurrency and non-blocking I/O in modern PHP. Use when implementing concurrent requests, async processing, or non-blocking I/O in PHP.

php-development

Cecilapp/Cecil

Expert guidance for PHP 8+ development, prioritizing code quality (SOLID, PSR standards), security practices, and testing requirements

php-error-handling

HoangNguyen0403/agent-skills-standard

Implement modern PHP error and exception handling patterns. Use when implementing exception hierarchies, error handlers, or custom exceptions in PHP.

php-exploit-chain

wgpsec/AboutSecurity

|

php-file-audit

wgpsec/AboutSecurity

|

php-framework-audit

wgpsec/AboutSecurity

|

php-frontend-audit

wgpsec/AboutSecurity

|

php-injection-audit

wgpsec/AboutSecurity

|

php-language

HoangNguyen0403/agent-skills-standard

Apply core PHP language standards and modern 8.x features. Use when working with PHP 8.x features like enums, fibers, readonly properties, or named arguments.

php-mcp-server-generator

github/awesome-copilot

'Generate a complete PHP Model Context Protocol server project with tools, resources, prompts, and tests using the official PHP SDK'

php-pro

Jeffallan/claude-skills

Use when building PHP applications with modern PHP 8.3+ features, Laravel, or Symfony frameworks. Invokes strict typing, PHPStan level 9, async patterns with Swoole, and PSR standards. Creates controllers, configures middleware, generates migrations, writes PHPUnit/Pest tests, defines typed DTOs and value objects, sets up dependency injection, and scaffolds REST/GraphQL APIs. Use when working with Eloquent, Doctrine, Composer, Psalm, ReactPHP, or any PHP API development.

php-pro-v2

diegosouzapw/awesome-omni-skills

php-pro workflow skill. Use this skill when the user needs 'Write idiomatic PHP code with generators, iterators, SPL data and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.

php-quality

notque/vexjoy-agent

PHP code quality: PSR standards, strict types, framework idioms.

php-rules

softspark/ai-toolkit

PHP coding rules: style, patterns, security, testing. Triggers: .php, composer.json, Laravel, Symfony, PHPUnit, PSR-12, Composer.

php-security

HoangNguyen0403/agent-skills-standard

PHP security standards for database access, password handling, and input validation. Use when securing PHP apps against SQL injection, XSS, or weak password storage.

php-serialization-audit

wgpsec/AboutSecurity

|

php-testing

HoangNguyen0403/agent-skills-standard

Write unit and integration tests for PHP applications with PHPUnit and Pest. Use when writing PHPUnit unit tests or integration tests for PHP applications.

php-tooling

HoangNguyen0403/agent-skills-standard

Configure PHP ecosystem tooling, dependency management, and static analysis. Use when managing Composer dependencies, running PHPStan, or configuring PHP build tools.

php-type-juggling

wgpsec/AboutSecurity

PHP 类型杂耍（Type Juggling）和 Magic Hash 攻击方法论。当目标是 PHP 应用且存在密码比较、哈希校验、认证逻辑时使用。当看到 PHP `==` 松散比较、MD5/SHA1 哈希校验、strcmp 比较、JSON 输入处理、is_numeric 检查时必须使用。当错误登录泄露了输入的 MD5 哈希值时，这是 Magic Hash 的强信号，立即使用。CTF/渗透中 PHP 认证绕过最常见的漏洞类型之一。即使只是看到 PHP 5.x 或响应中包含哈希值，也应考虑使用此 skill

phx-audit

oliver-kriska/claude-elixir-phoenix

Project health audit and health check — architecture, performance, tests,

phx-boundaries

oliver-kriska/claude-elixir-phoenix

Analyze Phoenix context boundaries and module coupling via mix xref.

phx-brainstorm

oliver-kriska/claude-elixir-phoenix

Brainstorm Elixir/Phoenix features — explore ideas, compare approaches,

phx-brief

oliver-kriska/claude-elixir-phoenix

Interactive briefing of a plan file — explains reasoning, schema decisions,

phx-challenge

oliver-kriska/claude-elixir-phoenix

Challenge mode reviews - rigorous questioning before approving changes.

phx-codex-loop

oliver-kriska/claude-elixir-phoenix

Fix Elixir/Phoenix code until Codex CLI review comes back clean — bounded

phx-compound

oliver-kriska/claude-elixir-phoenix

Capture solved problems as searchable solution docs. Use after fixing

phx-deps-audit

oliver-kriska/claude-elixir-phoenix

Audit Hex deps for supply-chain security risk — bidi chars, compile-time

phx-deps-update

oliver-kriska/claude-elixir-phoenix

Bump outdated Hex deps — inventory, snapshot changelogs, update, fix

phx-deps-vet

oliver-kriska/claude-elixir-phoenix

Record a vetted Hex package version in hex_vet.exs after a security review

phx-document

oliver-kriska/claude-elixir-phoenix

Generate @moduledoc and @doc strings for Elixir modules, contexts, and

phx-examples

oliver-kriska/claude-elixir-phoenix

Provide examples and walkthroughs for Phoenix, LiveView, Ecto, OTP patterns.

phx-freeze

oliver-kriska/claude-elixir-phoenix

Scope or freeze which files Claude can edit during debugging, a refactor,

phx-full

oliver-kriska/claude-elixir-phoenix

Use for large features spanning multiple contexts or autonomous end-to-end

phx-help

oliver-kriska/claude-elixir-phoenix

Recommend the right phx-* command for planning, review, debug, deploy,

phx-init

oliver-kriska/claude-elixir-phoenix

Initialize plugin in a project — install Iron Laws, auto-activation rules,

phx-intro

oliver-kriska/claude-elixir-phoenix

Walk through the Elixir/Phoenix plugin commands, workflow, and features

phx-investigate

oliver-kriska/claude-elixir-phoenix

Investigate bugs and errors in Elixir/Phoenix — root-cause analysis for

phx-learn-from-fix

oliver-kriska/claude-elixir-phoenix

Capture Elixir/Ecto/LiveView lessons and Hex API rules. Use after corrections

phx-mix-compression

oliver-kriska/claude-elixir-phoenix

Reduce mix output noise (5-15% token savings) by installing rtk filters

phx-perf

oliver-kriska/claude-elixir-phoenix

Analyze Elixir/Phoenix performance — N+1 queries, assign bloat, ecto

phx-permissions

oliver-kriska/claude-elixir-phoenix

Recommend safe Bash permissions for Elixir mix commands in settings.json.

phx-plan

oliver-kriska/claude-elixir-phoenix

'Plan features spanning multiple domains: billing (Stripe), auth (RBAC),

phx-pr-review

oliver-kriska/claude-elixir-phoenix

Address PR review threads on Elixir/Phoenix code — fetch unresolved threads,

phx-quick

oliver-kriska/claude-elixir-phoenix

Implement small Phoenix changes without planning — add validations, update

phx-recall

oliver-kriska/claude-elixir-phoenix

Recall prior work from past sessions — how a bug was fixed, what was

phx-research

oliver-kriska/claude-elixir-phoenix

Research Elixir/Phoenix topics or evaluate Hex libraries (--library).

phx-review

oliver-kriska/claude-elixir-phoenix

Review code with parallel agents — tests, security, Ecto, LiveView, Oban.

phx-techdebt

oliver-kriska/claude-elixir-phoenix

Analyze Elixir/Phoenix technical debt — duplicates, refactoring opportunities,

phx-trace

oliver-kriska/claude-elixir-phoenix

Trace Elixir call trees from entry points via mix xref. Use when debugging

phx-triage

oliver-kriska/claude-elixir-phoenix

Triage review findings interactively — approve, skip, or prioritize each

phx-verify

oliver-kriska/claude-elixir-phoenix

Verify Elixir/Phoenix changes — compile, format, and test in one loop.

phx-watch-pr

oliver-kriska/claude-elixir-phoenix

Watch an Elixir/Phoenix PR for new review comments (bot + human) and

phx-work

oliver-kriska/claude-elixir-phoenix

Execute Elixir/Phoenix plan tasks with progress tracking. Use after phx-plan

phx:audit

oliver-kriska/claude-elixir-phoenix

Project health audit and health check — architecture, performance, tests, dependencies, code quality. Use when assessing overall project health, before releases, or after refactors.

phx:boundaries

oliver-kriska/claude-elixir-phoenix

Analyze Phoenix context boundaries and module coupling via mix xref. Use when checking cross-context calls, validating dependencies, before splitting modules, or reviewing architecture.

phx:brainstorm

oliver-kriska/claude-elixir-phoenix

Brainstorm Elixir/Phoenix features — explore ideas, compare approaches, gather requirements. Use when vague idea, not sure how to approach, or want to discuss before plan.

phx:brief

oliver-kriska/claude-elixir-phoenix

Interactive briefing of a plan file — explains reasoning, schema decisions, component choices. Use when developers need to understand a plan before approving.

phx:challenge

oliver-kriska/claude-elixir-phoenix

Challenge mode reviews - rigorous questioning before approving changes. Use when you want thorough scrutiny of Ecto changes, LiveView events, OTP designs, or PR readiness.

phx:codex-loop

oliver-kriska/claude-elixir-phoenix

Fix Elixir/Phoenix code until Codex CLI review comes back clean — bounded review, fix, verify loop before opening a PR. Use when codex is installed and you want an external cross-model critic on your changes before pushing.

phx:compound

oliver-kriska/claude-elixir-phoenix

Capture solved problems as searchable solution docs. Use after fixing bugs, when "that worked", or after successful /phx:review or /phx:investigate.

phx:deps-audit

oliver-kriska/claude-elixir-phoenix

Audit Hex deps for supply-chain security risk — bidi chars, compile-time exec, maintainer changes, typosquats, CVEs. Use after mix deps.update, when checking if a package upgrade is safe, or reviewing mix.lock PR diffs.

phx:deps-update

oliver-kriska/claude-elixir-phoenix

Bump outdated Hex deps — inventory, snapshot changelogs, update, fix breaks, split reviewable PRs (patches bundled, majors solo). Use to upgrade/bump Elixir dependencies or when versions fall behind. NOT for deps.get failures (/phx:investigate).

phx:deps-vet

oliver-kriska/claude-elixir-phoenix

Record a vetted Hex package version in hex_vet.exs after a security review — manages the audit ledger, not the scanner. Use to approve a dep after /phx:deps-audit findings or to initialize hex_vet.exs.

phx:document

oliver-kriska/claude-elixir-phoenix

Generate @moduledoc and @doc strings for Elixir modules, contexts, and schemas. Use when explicitly asked to write @doc/@moduledoc — NOT for README or external docs.

phx:examples

oliver-kriska/claude-elixir-phoenix

Provide examples and walkthroughs for Phoenix, LiveView, Ecto, OTP patterns. Use when "how do I...", "show me an example", or "what does X look like".

phx:freeze

oliver-kriska/claude-elixir-phoenix

Scope or freeze which files Claude can edit during debugging, a refactor, or review. Use when edits should stay in specific dirs, or for a read-only investigate lock. Backed by a sentinel + PreToolUse hook.

phx:full

oliver-kriska/claude-elixir-phoenix

Use for large features spanning multiple contexts or autonomous end-to-end implementation. Runs the full plan-implement-review-compound cycle with specialist agents. NOT for executing an existing plan file — use /phx:work for that.

phx:help

oliver-kriska/claude-elixir-phoenix

Recommend the right /phx: command for planning, review, debug, deploy, or test tasks. Use when \"which command\", \"what should I use\", or \"how do I\". NOT for /help.

phx:init

oliver-kriska/claude-elixir-phoenix

Initialize plugin in a project — install Iron Laws, auto-activation rules, and reference auto-loading into CLAUDE.md. Use when setting up or updating the plugin.

phx:intro

oliver-kriska/claude-elixir-phoenix

Walk through the Elixir/Phoenix plugin commands, workflow, and features in 6 interactive sections. Use when a new user wants to learn what the plugin offers or needs a refresher on available commands.

phx:investigate

oliver-kriska/claude-elixir-phoenix

Investigate bugs and errors in Elixir/Phoenix — root-cause analysis for crashes, exceptions, stack traces, test failures. Use --parallel for deep 4-track investigation.

phx:learn-from-fix

oliver-kriska/claude-elixir-phoenix

Capture Elixir/Ecto/LiveView lessons and Hex API rules. Use after corrections or when asked to document learning, record a lesson, prevent a fixed mistake, or remember package guidance with --library.

phx:mix-compression

oliver-kriska/claude-elixir-phoenix

Reduce mix output noise (5-15% token savings) by installing rtk filters that compress mix test/credo/dialyzer/compile output before it reaches Claude. Use when long mix output floods context.

phx:perf

oliver-kriska/claude-elixir-phoenix

Analyze Elixir/Phoenix performance — N+1 queries, assign bloat, ecto optimization, genserver bottlenecks. Use when slowness, timeouts, or high memory reported.

phx:permissions

oliver-kriska/claude-elixir-phoenix

Recommend safe Bash permissions for Elixir mix commands in settings.json. Use when permission prompts slow workflow, "fix permissions", "reduce prompts", "auto-allow mix".

phx:plan

oliver-kriska/claude-elixir-phoenix

Plan features spanning multiple domains: billing (Stripe), auth (RBAC), real-time (Presence), webhooks, jobs (Oban). Use when designing interconnected systems or converting review findings into tasks.

phx:pr-review

oliver-kriska/claude-elixir-phoenix

Address PR review threads on Elixir/Phoenix code — fetch unresolved threads, fix code, reply, and resolve each thread. Use when the user shares a PR URL or mentions reviewer feedback.

phx:quick

oliver-kriska/claude-elixir-phoenix

Implement small Phoenix changes without planning — add validations, update routes, fix components, create migrations. Use for single-file edits under 50 lines.

phx:recall

oliver-kriska/claude-elixir-phoenix

Recall prior work from past sessions — how a bug was fixed, what was decided, where a pattern lives. Use when asked 'have we done this before' or 'how did I fix X' in Elixir/Phoenix work. ccrider MCP when available, else git + solution docs.

phx:research

oliver-kriska/claude-elixir-phoenix

Research Elixir/Phoenix topics or evaluate Hex libraries (--library). Use when learning about libraries, patterns, or comparing approaches. Searches HexDocs, ElixirForum, GitHub.

phx:review

oliver-kriska/claude-elixir-phoenix

Review code with parallel agents — tests, security, Ecto, LiveView, Oban. Use after implementation to catch bugs and anti-patterns before committing.

phx:techdebt

oliver-kriska/claude-elixir-phoenix

Analyze Elixir/Phoenix technical debt — duplicates, refactoring opportunities, credo issues. Use when asked about code quality, cleanup, or what to improve.

phx:trace

oliver-kriska/claude-elixir-phoenix

Trace Elixir call trees from entry points via mix xref. Use when debugging data flow, planning signature changes, or understanding how a bug reaches code.

phx:triage

oliver-kriska/claude-elixir-phoenix

Triage review findings interactively — approve, skip, or prioritize each issue. Use after /phx:review to filter findings before fixing.

phx:verify

oliver-kriska/claude-elixir-phoenix

Verify Elixir/Phoenix changes — compile, format, and test in one loop. Use after implementation, before PRs, or after fixing bugs.

phx:watch-pr

oliver-kriska/claude-elixir-phoenix

Watch an Elixir/Phoenix PR for new review comments (bot + human) and CI results via a background watcher that wakes Claude only on real events. Use after opening a PR or pushing, while waiting on CI or reviewers.

phx:work

oliver-kriska/claude-elixir-phoenix

Execute Elixir/Phoenix plan tasks with progress tracking. Use after /phx:plan to implement features with mix compile and mix test verification after each step, or --continue to resume interrupted work.

phylogenetic-tree-styler

aipoch/medical-research-skills

Analyze data with `phylogenetic-tree-styler` using a reproducible workflow, explicit validation, and structured outputs for review-ready interpretation.

phylogenetics

K-Dense-AI/scientific-agent-skills

Build and analyze phylogenetic trees using MAFFT (multiple alignment), IQ-TREE 2 (maximum likelihood), and FastTree (fast NJ/ML). Visualize with ETE3 or FigTree. For evolutionary analysis, microbial genomics, viral phylodynamics, protein family analysis, and molecular clock studies.

physical-ai-infrastructure-setup-and-resilient-scaling

openai/plugins

>-

physical-ai-neural-reconstruction

openai/plugins

Router for NVIDIA NuRec/NRE: USDZ rendering, NCore conversion, 3DGS, gRPC sensor sim, PhysicalAI HF datasets. Do NOT use for SimReady or infra setup.

physical-chemistry

Tibsfox/gsd-skill-creator

Chemical equilibrium, chemical kinetics, and electrochemistry — the quantitative core of physical chemistry. Covers equilibrium constants (Keq, Kc, Kp), Le Chatelier's principle, ICE tables, buffers and the Henderson-Hasselbalch equation, solubility product (Ksp) and the common-ion effect, rate laws, reaction order, integrated rate laws, half-life, the Arrhenius equation and activation energy, catalysis, redox reactions, galvanic and electrolytic cells, standard cell potentials, and the Nernst equation. Use when solving quantitative problems about how far a reaction goes (equilibrium), how fast it goes (kinetics), or how it converts chemical energy to electrical energy (electrochemistry).

physical-geography

Tibsfox/gsd-skill-creator

Earth systems science covering plate tectonics, landforms, erosion, biomes, hydrosphere, atmospheric circulation, and the interactions among lithosphere, hydrosphere, atmosphere, and biosphere. Provides frameworks for analyzing how physical processes shape landscapes over geological and human timescales. Use when reasoning about landforms, natural hazards, climate patterns, ocean currents, biogeography, or any question about how Earth's physical systems operate and interact.

physics-sim

arjun988/blender-skills

Rigid body, soft body, and destruction setups in Blender including constraints, cell fracture debris, and baked caches via MCP.

pi

share-skills/pi

PI 智行合一。触发：$pi/编程/开发/dev/code/代码/实现/架构/API/重构/调试/debug/bug/报错/异常/崩溃/超时/性能/优化/测试/test/编译/compile/git/make/发布/验证/审查/review/CR/产品/需求/运营/增长/创意/设计/协作/团队/沟通/交互/陪伴/情感，或深度/deep/失败2+次/反复失败/打转/卡住/言退/再试试/换个参数/算了