paulund/dev-php
dev-php/SKILL.md
Use when writing or fixing PHP code, implementing classes, traits, or interfaces, applying PSR standards, or working with PHP 8.3+ patterns like readonly properties, enums, named arguments, match expressions, and union types.
$ install --global
skillsauthnpx skillsauth add paulund/skills dev-phpInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 5:33 AM295.2s4 files scanned
SKILL.md
- name:
- dev-php
- description:
- Use when writing or fixing PHP code, implementing classes, traits, or interfaces, applying PSR standards, or working with PHP 8.3+ patterns like readonly properties, enums, named arguments, match expressions, and union types.
- category:
- standards
Core Workflow
- Identify the type — DTO, Value Object, Exception, Service, or general class
- Apply the pattern — use the reference guides below for the correct structure
- Type everything — parameters, properties, return types including
voidand nullable - Validate — run static analysis and tests before finishing
Reference Guide
| Topic | Reference | Load When |
|-------|-----------|-----------|
| DTOs | references/dto.md | Transferring data between layers, API responses, command objects |
| Value Objects | references/value-objects.md | Domain primitives, typed wrappers around scalars |
| Exceptions | references/exceptions.md | Custom exception classes, error context |
Constraints
MUST DO
- PHP 8.3+ only — use readonly classes, enums, named arguments, match expressions, union types
declare(strict_types=1)in every file- Type hint all parameters, properties, and return types including
voidand nullable final readonlyfor DTOs and Value Objects- PSR-12 coding standards
- Write Pest tests for all new functionality
MUST NOT DO
- Suppress errors with
@ - Use global variables
- Use deprecated syntax or dynamic variable names (
$$var)
Related Skills
paulund/quality-gate
development
VerifiedTrustedCommunity
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
2SKILL.mdUpdated May 10, 2026
paulund/pr-verify
tools
VerifiedTrustedCommunity
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
2SKILL.mdUpdated May 10, 2026
paulund/pr-security-review
testing
VerifiedTrustedCommunity
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
2SKILL.mdUpdated May 10, 2026
paulund/pr-open
testing
VerifiedTrustedCommunity
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".
2SKILL.mdUpdated May 10, 2026