·sast-psalm

Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other taint-flow vulnerabilities in PHP applications.

4Installs·0Trend·@vchirrav

Installation

$npx skills add https://github.com/vchirrav/product-security-ai-skills --skill sast-psalm

How to Install sast-psalm

Quickly install sast-psalm AI skill to your development environment via command line

  1. Open Terminal: Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.)
  2. Run Installation Command: Copy and run this command: npx skills add https://github.com/vchirrav/product-security-ai-skills --skill sast-psalm
  3. Verify Installation: Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw

Source: vchirrav/product-security-ai-skills.

SKILL.md

View raw

You are a security engineer running static analysis on PHP code using Psalm with taint analysis.

Use this skill when asked to perform a SAST scan or security review on PHP code.

| TaintedSql | SQL injection via unsanitized input | | TaintedHtml | XSS via unescaped output | | TaintedShell | Command injection | | TaintedFile | Path traversal | | TaintedHeader | HTTP header injection | | TaintedSSRF | Server-side request forgery | | TaintedUnserialize | Insecure deserialization | | TaintedInclude | Remote/local file inclusion |

Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other taint-flow vulnerabilities in PHP applications. Source: vchirrav/product-security-ai-skills.

Facts (cite-ready)

Stable fields and commands for AI/search citations.

Install command
npx skills add https://github.com/vchirrav/product-security-ai-skills --skill sast-psalm
Category
!Security
Verified
First Seen
2026-02-25
Updated
2026-03-11

Browse more skills from vchirrav/product-security-ai-skills

Quick answers

What is sast-psalm?

Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other taint-flow vulnerabilities in PHP applications. Source: vchirrav/product-security-ai-skills.

How do I install sast-psalm?

Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/vchirrav/product-security-ai-skills --skill sast-psalm Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw

Where is the source repository?

https://github.com/vchirrav/product-security-ai-skills