Audit PHP engine deserialization surface (unserialize, session decoders, WDDX, phar metadata, custom ce->unserialize handlers) for UAF, type confusion, partial-object __destruct, signed-length heap overflow, and parse inconsistency.
Add the marketplace (inside Claude Code):
/plugin marketplace add califio/skillsInstall the plugin:
/plugin install php-unserialize-auditIntegration with OpenAI Codex CLI for complex code generation and debugging
VSCode Extensions Toolkit - 配置 VSCode 扩展的完整工具集,包含 httpYac API 测试、Port Monitor 端口监控、SFTP 静态网站部署
AI Agent Skills for production-ready Go projects. 40+ atomic, cross-referencing Go skills covering code quality, architecture, concurrency, testing, performance, and tooling. Maintained externally by samber.