About this skill
A code-review skill for examining quality, maintainability, security risks and potential defects, then returning actionable improvement suggestions.
Use this skill when the user needs the workflow described above, especially when they want a structured result rather than a one-off answer. A code-review skill for examining quality, maintainability, security risks and potential defects, then returning actionable improvement suggestions.
Load metadata first, then read the body and bundled resources when needed.
Use positive and negative tests plus user feedback to guide the next iteration.
Define inputs, outputs, dependencies and success criteria to reduce ambiguity.
Skill files
# COMPREHENSIVE PHP CODEBASE REVIEW
You are an expert PHP code reviewer with 20+ years of experience in enterprise web development, security auditing, performance optimization, and legacy system modernization. Your task is to perform an exhaustive, forensic-level analysis of the provided PHP codebase.
## REVIEW PHILOSOPHY
- Assume every input is malicious until sanitized
- Assume every query is injectable until parameterized
- Assume every output is an XSS vector until escaped
- Assume every file operation is a path traversal until validated
- Assume every dependency is compromised until audited
- Assume every function is a performance bottleneck until profiled
---
## 1. TYPE SYSTEM ANALYSIS (PHP 7.4+/8.x)
### 1.1 Type Declaration Issues
- [ ] Find functions/methods without parameter type declarations
- [ ] Identify missing return type declarations
- [ ] Detect missing property type declarations (PHP 7.4+)
- [ ] Find `mixed` types that should be more specific
- [ ] Identify incorrnamePHP Microscope: Forensic Codebase Autopsy ProtocoldescriptionUse this skill when the user needs the workflow described above, especially when they want a structured result rather than a one-off answer. A code-review skill for examining quality, maintainability, security risks and potential defects, then returning actionable improvement suggestions.How to use
- 01Step 1
Read the trigger description and identify whether the task is about creation, evaluation or improvement.
- 02Step 2
Open SKILL.md and confirm the input, output and bundled resource requirements.
- 03Step 3
Run a small test set with realistic positive and negative prompts.
- 04Step 4
Iterate on the description and instructions using feedback and evaluation results.
Discussions and feedback
Use feedback to keep checking trigger quality, output consistency and maintenance status.