PHP Web 源码任意文件读取/路径穿越审计工具。识别文件读取 Sink,追踪路径来源与校验逻辑,输出可利用性分级、PoC 与修复建议(禁止省略)。
$npx -y skills add 0xshe/php-code-audit-skill --skill php-file-read-auditInstalls into the current project.
Run `npx skills use "https://github.com/0xshe/php-code-audit-skill" --skill "0xshe/php-code-audit-skill/php-file-read-audit"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/0xshe/php-code-audit-skill" that are relevant to the current task. Run `npx skills add "https://github.com/0xshe/php-code-audit-skill"` and select the relevant skills, then follow their instructions.