A specialized toolset for auditing legacy Yaf framework PHP 7.3 projects for security, performance, and reliability risks.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install yaf-php-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install yaf-php-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Yaf PHP Audit?
The Yaf PHP Audit skill is a dedicated utility for developers managing legacy PHP infrastructures. Built to integrate with the Openclaw Skills ecosystem, this tool provides a structured methodology for auditing Yaf-based applications, specifically targeting PHP 7.3 compatibility. It helps teams uncover hidden security vulnerabilities, performance bottlenecks like N+1 queries, and architectural debt while providing actionable remediation advice tailored for legacy systems.
By leveraging automated scanning scripts alongside manual review workflows, the skill ensures that critical paths such as payment processing and authentication logic are thoroughly vetted. It is an essential asset for anyone needing to maintain or migrate older PHP projects while utilizing Openclaw Skills for automated triaging.
Yaf PHP Audit Use Cases
- Performing security audits on legacy Yaf framework web applications.
- Identifying performance bottlenecks in Redis and SQL query patterns.
- Checking PHP 7.3 compatibility for older codebases during maintenance.
- Triaging multiple PHP projects simultaneously to identify high-risk areas using Openclaw Skills.
How Yaf PHP Audit Works
- Initialize the audit by confirming the target directory and mapping public entrypoints.
- Trace the logic flow from routing to controllers, models, and external service calls.
- Run the automated scan script to identify immediate hotspots and security risks.
- Evaluate findings against the standardized audit checklist provided in the skill.
- Compile a structured report that ranks issues by business criticality and provides remediation steps.
Yaf PHP Audit Setup
To begin using this skill within the Openclaw Skills framework, ensure your environment has bash, grep, and find available. Navigate to your project directory and execute the scan scripts.
# Scan a single project and generate a report
./scripts/scan_project.sh /path/to/php-project audit_report.txt
# Perform a bulk scan of an entire workspace
./scripts/scan_workspace.sh /path/to/workspace/ output_directory/
Yaf PHP Audit Data Schema & Taxonomy
The Yaf PHP Audit skill uses a clear data taxonomy to organize its findings. Results are structured into the following components:
| Data Component | Description |
|---|---|
| Checklist Reference | A markdown-based guide (references/checklist.md) defining risk levels and templates. |
| Project Scan Report | Automated output from scan_project.sh highlighting hotspots. |
| Workspace Summary | A high-level overview of multiple projects generated by scan_workspace.sh. |
| Finding Metadata | Each risk finding includes the file path, problem summary, impact, and recommendation. |
Yaf PHP Audit Advanced Features
- Automated bulk auditing capabilities for managing large portfolios of legacy applications.
- Specialized detection for dangerous PHP functions like eval, exec, and shell_exec.
- Deep analysis of Redis usage, specifically identifying expensive commands like sdiff.
- Structured idempotency and race condition checking for payment and callback logic within Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
Working Capital Optimizer
An AI-driven analytical tool designed to diagnose and improve the cash conversion cycle for growing businesses.
Prompt Bozo
A professional modular prompt generator for high-fidelity AI image and video production supporting diverse generation modes.
Beer — Styles Encyclopedia, Food Pairing & Homebrew Guide
A comprehensive digital sommelier and homebrewing toolkit for exploring beer styles, perfecting food pairings, and managing brewing calculations.
Google Analytics Intelligence
Automate GA4 reporting and growth optimization using real-time data extraction and statistical anomaly detection.
Zhua Contributor
A comprehensive contribution system for AI agents to publish skills, generate documentation, and engage with the community.
openrouter-connect
A comprehensive utility for Openclaw Skills that enables seamless discovery, ranking, and integration of OpenRouter's free-tier LLM models.
Featured*
