Browse skills

Audit PHP and other source code by listing calls to known dangerous functions, checking for enumeration gaps, and examining input paths and safeguards. Store risk assessments and verdicts in a searchable audit ledger.

• Security reviews of PHP apps and WordPress plugins
• Checking for missed calls to known dangerous functions
• Tracing external input to risky operations

Index reference libraries locally with XERJ and retrieve relevant implementations before coding. Use the retrieved source to understand unfamiliar API behavior, port algorithms, or investigate errors that repeated attempts have not resolved.

• Checking how an unfamiliar API behaves
• Porting an algorithm from a reference implementation
• Investigating errors after repeated failed attempts