php-exploit-chain-audit

Aggregate PHP vulnerability audit reports into end-to-end exploit chains narratives.

386|38|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-exploit-chain-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: php-exploit-chain-audit
Source: https://github.com/0xShe/PHP-Code-Audit-Skill/tree/main/php-exploit-chain-audit
Command: npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-exploit-chain-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Aggregates vulnerability audit reports into cross-stage exploit chains, turning isolated findings into coherent end-to-end narratives without creating new evidence dictionaries.

Core Features & Use Cases

  • Cross-skill chaining: link vuln_audit and auth_audit reports by preconditions to form exploitation chains.
  • Narrative output: produce chain narratives suitable for risk assessment and remediation planning.
  • Evidence contract compliance: reuse existing evidence dictionaries and avoid introducing new ones.

Quick Start

Aggregate vuln_audit reports into exploit chains and output to exploit_chain/exploit_chains_<timestamp>.md.

Frequently Asked Questions about php-exploit-chain-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I aggregate isolated PHP vulnerability findings into end-to-end exploit chains?▼

You aggregate PHP vulnerability audit reports by linking cross-stage preconditions from isolated findings to form coherent end-to-end exploit chains suitable for risk assessment and remediation planning.

What is an exploit chain narrative in PHP security analysis?▼

An exploit chain narrative in PHP security analysis links isolated vulnerability audit findings via preconditions, turning fragmented evidence into structured end-to-end exploitation paths for remediation planning.

Can I link auth_audit and vuln_audit reports together to form exploitation chains?▼

Yes, you can link auth_audit and vuln_audit reports. The aggregation process correlates preconditions across these security assessment outputs to form interconnected cross-skill exploitation chains.

Does the PHP exploit chain aggregation introduce new evidence dictionaries?▼

No, PHP exploit chain aggregation does not introduce new evidence dictionaries. It strictly adheres to established chain-building rules and reuses existing evidence contracts from the original audit inputs.

How do I output aggregated exploit chains for PHP security assessments?▼

You output aggregated exploit chains by processing linked audit reports into narrative markdown files, saving the end-to-end exploitation chain results into a timestamped document for remediation planning.

Do I need existing vuln_audit inputs before generating PHP exploit chain narratives?▼

Yes, you need existing vuln_audit inputs before generating PHP exploit chain narratives. The aggregation relies entirely on existing vulnerability audit reports to build cross-stage exploitation paths.