php-route-tracer

What problem does it solve?

This Skill automates the complex process of tracing execution paths and data flow within PHP applications, starting from defined routes.

Core Features & Use Cases

• Call Chain Tracing: Maps out the sequence of function and method calls originating from a specific route.
• Parameter Flow Analysis: Tracks how data (parameters) moves from their source through variables to their final use (sinks).
• Sink Identification: Pinpoints critical points in the code where external data is used, which are often potential security vulnerabilities.
• Evidence Generation: Outputs detailed, verifiable evidence chains for each route, including source, taint propagation, sink, and validation logic.
• Use Case: For a given web application route like /users/profile, this Skill will generate a report detailing every function called, how user input flows into those functions, and where that input is ultimately used, highlighting any sanitization or validation steps.

Quick Start

Use the php-route-tracer skill to trace the call chain and parameter flow for the route '/api/v1/users'.