php-dev-core SKILL.md skillB
php-dev-core from ddtcorex/maestro-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ddtcorex/maestro-skills/php-dev-core@git:20260829.08dd6c9Pins git:20260829.08dd6c9 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ddtcorex/maestro-skills
- Path
skills/php-dev-core/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260829.08dd6c9, committed Aug 29, 2026
- First version recorded
- Aug 29, 2026
- Size
- 10,491 bytes
- Repository stars
- 5
- License
- MIT
This skill should be used when the user is writing generic PHP, creating a Composer package, working with PSR-4/PSR-12, running PHPStan/PHPCS, handling PHP security, or building framework-agnostic PHP logic. Foundation skill for PHP development. DEPENDENT on govard-toolbox for environment commands.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# PHP Developer Core Foundation skill for framework-agnostic PHP. Covers coding standards, Composer, static analysis, security, and testing across Magento 2, Laravel, Symfony, and WordPress. Pair with `govard-toolbox` for container and environment commands (`govard up`, `govard sh`, `govard audit`). For framework-specific tooling see `govard-laravel`, `govard-symfony`, `govard-wordpress`, or `magento2-dev-core` for Magento DI and service contracts. ## Related Skills **REQUIRED BACKGROUND:** Load `govard-toolbox` first for environment lifecycle and audit matrix. This skill adds language-level patterns. Framework skills (`govard-laravel`, `govard-symfony`, `govard-wordpress`) depend on both `govard-toolbox` and `php-dev-core`; `magento2-dev-core` cross-references this skill for generic PHP and owns Magento-specific DI and plugins. ## 1. Coding Standards & Types Every new PHP file MUST start with strict types: ```php <?php declare(strict_types=1); ``` PSR-12 is the default. When framework conventions diverge, PSR-12 wins for generic code. | Rule | PSR-12 | Notes | |------|--------|-------| | Opening tag | `<?php` then `declare(strict_types=1);` | Blank line after declare | …
Read the whole file at its exact version.
How to install
mdr add ddtcorex/maestro-skills/php-dev-core@sha256:af3b611638964a22The line at the top of this page pins the label git:20260829.08dd6c9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_u3emnqn7jwdvn6ut)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Aug 29, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260829.08dd6c9 latest | 2026-08-29 | 08dd6c9 | 10,491 B | B | view · diff |
| git:20260829.ecee255 | 2026-08-29 | ecee255 | 10,471 B | B | view |
Audit of the latest version
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10491 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
ddtcorex/maestro-skills · 5 stars · license MIT · pushed 2026-10-27 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_u3emnqn7jwdvn6ut GET https://markdownregistry.com/api/v1/resolve?ref=ddtcorex/maestro-skills/php-dev-core GET https://markdownregistry.com/api/v1/blob/af3b611638964a229fd3223c157ccd776546cd5eaf432874fe7c0e47df98550a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.