{"task":"Use Php Static Analysis Tools in an agent workflow","recommendations":[{"rank":1,"skill":"Php Static Analysis Tools","slug":"exakat-php-static-analysis-tools","description":"A reviewed list of useful PHP static analysis tools","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":337.7093631584023,"install":"npx skills add exakat/php-static-analysis-tools","repository":"https://github.com/exakat/php-static-analysis-tools","stats":{"stars":2878,"downloads":0,"rating":0,"quality_score":62.91},"quality":{"score":95,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"2.9K","tone":"positive"},{"label":"Freshness","value":"1mo ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"Unknown","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":87,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"2.9K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":77,"weight":0.08,"status":"info","detail":"2.9K stars, 245 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":88,"weight":0.14,"status":"pass","detail":"1mo since push"},{"id":"license","label":"License clarity","score":42,"weight":0.09,"status":"warn","detail":"Unknown"},{"id":"documentation","label":"README/SKILL.md completeness","score":74,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add exakat/php-static-analysis-tools"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/exakat/php-static-analysis-tools"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"2.9K GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"2.9K stars, 245 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"1mo since push"},{"status":"warn","label":"License clarity","detail":"Unknown"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add exakat/php-static-analysis-tools"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/exakat/php-static-analysis-tools"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["License is unclear","License clarity: Unknown"],"evidence":{"stars":"2.9K GitHub stars","repoActivity":"2.9K stars, 245 forks","lastPushed":"1mo since push","license":"Unknown","repository":"https://github.com/exakat/php-static-analysis-tools","install":"npx skills add exakat/php-static-analysis-tools","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Usable metadata, review docs"},"installReadiness":{"ready":true,"command":"npx skills add exakat/php-static-analysis-tools","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is unclear","1mo since push"]},"agentCompatibility":["Static Analysis","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["License is unclear","License clarity: Unknown"]}},"safety":{"score":73,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","summary":"Good audit and safety signals with no high-risk permission hints in public metadata.","recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","auto_install_policy":"review","reasons":["Safe-to-try audit","73/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["License is unclear"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Review the audit page, then allow agent install in a sandboxed workflow.","reasons":["Safe-to-try audit","73/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"Coding agents","description":"I need a coding agent that can understand a repository, edit code, and review pull requests.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"github-automation","title":"GitHub automation"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","Static Analysis"],"install":{"ready":true,"command":"npx skills add exakat/php-static-analysis-tools","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":2878,"starsLabel":"2.9K","forks":245,"license":"Unknown","qualityScore":95,"trustScore":87,"auditScore":89},"maintenance":{"status":"active","label":"1mo since push","daysSincePush":41,"lastPushedAt":"2026-05-07T05:43:52+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["License is unclear","License clarity: Unknown"]},"coverageTags":["Coding","Coding agents","development","static-analysis","code-quality","php","php-analysis","php-applications"]},"audit":{"audit_score":89,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["License is unclear","License clarity: Unknown"]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add exakat/php-static-analysis-tools","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Php Static Analysis Tools\" agent skill from https://github.com/exakat/php-static-analysis-tools. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Php Static Analysis Tools\" as a Claude Code skill from https://github.com/exakat/php-static-analysis-tools. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Php Static Analysis Tools\" from https://github.com/exakat/php-static-analysis-tools into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: A reviewed list of useful PHP static analysis tools","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/exakat-php-static-analysis-tools","api":"https://www.openagentskill.com/api/agent/skills/exakat-php-static-analysis-tools","install_api":"https://www.openagentskill.com/api/skills/exakat-php-static-analysis-tools/install","audit":"https://www.openagentskill.com/skills/exakat-php-static-analysis-tools/audit","repository":"https://github.com/exakat/php-static-analysis-tools"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["2,878 GitHub stars","recent repository activity","install command or GitHub repo available","95/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"}],"recommendation_reasons":["Matches task terms: use, php, static, analysis","Useful GitHub adoption: 2,878 stars","Install handoff is available","Repository freshness signal is available","Registry match score 326"],"reasoning":"Strong task match. Evidence: verified author, 63 quality score. A reviewed list of useful PHP static analysis tools"},{"rank":2,"skill":"Setup Php","slug":"shivammathur-setup-php","description":"GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":266.9183478320706,"install":"npx skills add shivammathur/setup-php","repository":"https://github.com/shivammathur/setup-php","stats":{"stars":3231,"downloads":0,"rating":0,"quality_score":66.27},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"3.2K","tone":"positive"},{"label":"Freshness","value":"3d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":95,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":86,"weight":0.13,"status":"pass","detail":"3.2K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":83,"weight":0.08,"status":"pass","detail":"3.2K stars, 412 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"3d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":90,"weight":0.14,"status":"pass","detail":"Metadata includes enough usage and workflow context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add shivammathur/setup-php"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/shivammathur/setup-php"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"3.2K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"3.2K stars, 412 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"3d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"pass","label":"README/SKILL.md completeness","detail":"Metadata includes enough usage and workflow context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add shivammathur/setup-php"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/shivammathur/setup-php"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":[],"evidence":{"stars":"3.2K GitHub stars","repoActivity":"3.2K stars, 412 forks","lastPushed":"3d since push","license":"MIT","repository":"https://github.com/shivammathur/setup-php","install":"npx skills add shivammathur/setup-php","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Strong README/SKILL.md context"},"installReadiness":{"ready":true,"command":"npx skills add shivammathur/setup-php","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","3d since push"]},"agentCompatibility":["TypeScript","Static Analysis","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["No major trust warnings detected from available metadata"]}},"safety":{"score":88,"level":"safe_to_install","label":"Safe to install with normal review","safety_tier":{"tier":"verified","label":"Verified","badge":"VERIFIED","summary":"Strong metadata, audit, install, and review signals. Suitable for agent shortlists after normal workspace review.","recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","auto_install_policy":"allow","reasons":["Verified listing","Safe-to-try audit","88/100 agent safety score"]},"auto_install_allowed":true,"human_review_required":false,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":[],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"verified","label":"Verified","badge":"VERIFIED","auto_install_policy":"allow","auto_install_allowed":true,"human_review_required":false,"blocked":false,"recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","reasons":["Verified listing","Safe-to-try audit","88/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"Coding agents","description":"I need a coding agent that can understand a repository, edit code, and review pull requests.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"workflow-automation","title":"Workflow automation"},{"slug":"github-automation","title":"GitHub automation"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","TypeScript"],"install":{"ready":true,"command":"npx skills add shivammathur/setup-php","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":3231,"starsLabel":"3.2K","forks":412,"license":"MIT","qualityScore":100,"trustScore":95,"auditScore":96},"maintenance":{"status":"fresh","label":"3d since push","daysSincePush":3,"lastPushedAt":"2026-06-13T12:36:57+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":false,"notes":["No major risk signals from available metadata"]},"coverageTags":["Coding","Coding agents","development","static-analysis","code-quality","code-coverage","composer","continuous-integration"]},"audit":{"audit_score":96,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":[]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add shivammathur/setup-php","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Setup Php\" agent skill from https://github.com/shivammathur/setup-php. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Setup Php\" as a Claude Code skill from https://github.com/shivammathur/setup-php. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Setup Php\" from https://github.com/shivammathur/setup-php into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/shivammathur-setup-php","api":"https://www.openagentskill.com/api/agent/skills/shivammathur-setup-php","install_api":"https://www.openagentskill.com/api/skills/shivammathur-setup-php/install","audit":"https://www.openagentskill.com/skills/shivammathur-setup-php/audit","repository":"https://github.com/shivammathur/setup-php"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["3,231 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"}],"recommendation_reasons":["Matches task terms: use, php, static, analysis","Useful GitHub adoption: 3,231 stars","Install handoff is available","Repository freshness signal is available","Registry match score 245"],"reasoning":"Strong task match. Evidence: verified author, 66 quality score. GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools."},{"rank":3,"skill":"Phpstan","slug":"phpstan-phpstan","description":"PHP Static Analysis Tool - discover bugs in your code without running it!","confidence":"1.00","match_label":"Strong task match","safety_adjusted_score":258.25013985041,"install":"npx skills add phpstan/phpstan","repository":"https://github.com/phpstan/phpstan","stats":{"stars":13997,"downloads":0,"rating":0,"quality_score":72.22},"quality":{"score":100,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"14K","tone":"positive"},{"label":"Freshness","value":"2d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":95,"tier":"production","label":"Production candidate","summary":"Strong OpenAgentSkill Trust Score across adoption, recent maintenance, license clarity, documentation, dependency/runtime risk, install safety, permission surface, and install availability.","recommendedAction":"Shortlist for production use, then run a normal repository and dependency review.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"14K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":92,"weight":0.08,"status":"pass","detail":"14K stars, 949 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"2d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":74,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":90,"weight":0.12,"status":"pass","detail":"no major dependency risk hints in public metadata"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add phpstan/phpstan"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":86,"weight":0.07,"status":"pass","detail":"filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/phpstan/phpstan"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"14K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"14K stars, 949 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"2d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"pass","label":"Dependency/runtime risk","detail":"no major dependency risk hints in public metadata"},{"status":"pass","label":"Install availability","detail":"npx skills add phpstan/phpstan"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"pass","label":"Permission surface","detail":"filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/phpstan/phpstan"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"pass","label":"Ownership","detail":"Listing manually verified"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["Manually verified listing","AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":[],"evidence":{"stars":"14K GitHub stars","repoActivity":"14K stars, 949 forks","lastPushed":"2d since push","license":"MIT","repository":"https://github.com/phpstan/phpstan","install":"npx skills add phpstan/phpstan","installSafety":"standard package or runtime install path","permissionSurface":"filesystem or document access","documentation":"Usable metadata, review docs"},"installReadiness":{"ready":true,"command":"npx skills add phpstan/phpstan","policy":"agent_install_candidate","label":"Agent install candidate","notes":["Install path is available","Repository evidence is available","License is declared","2d since push"]},"agentCompatibility":["PHP","Static Analysis","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"low","label":"Low metadata risk","notes":["No major trust warnings detected from available metadata"]}},"safety":{"score":87,"level":"safe_to_install","label":"Safe to install with normal review","safety_tier":{"tier":"verified","label":"Verified","badge":"VERIFIED","summary":"Strong metadata, audit, install, and review signals. Suitable for agent shortlists after normal workspace review.","recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","auto_install_policy":"allow","reasons":["Verified listing","Safe-to-try audit","87/100 agent safety score"]},"auto_install_allowed":true,"human_review_required":false,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":[],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"verified","label":"Verified","badge":"VERIFIED","auto_install_policy":"allow","auto_install_allowed":true,"human_review_required":false,"blocked":false,"recommended_action":"Allow agent install in a sandbox or low-risk workspace, then promote after one successful narrow task.","reasons":["Verified listing","Safe-to-try audit","87/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"Coding agents","description":"I need a coding agent that can understand a repository, edit code, and review pull requests.","useCases":[{"slug":"coding-agents","title":"Coding agents"},{"slug":"testing-qa","title":"Testing and QA"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","PHP"],"install":{"ready":true,"command":"npx skills add phpstan/phpstan","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":13997,"starsLabel":"14K","forks":949,"license":"MIT","qualityScore":100,"trustScore":95,"auditScore":95},"maintenance":{"status":"fresh","label":"2d since push","daysSincePush":2,"lastPushedAt":"2026-06-15T02:34:44+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":false,"notes":["No major risk signals from available metadata"]},"coverageTags":["Coding","Coding agents","development","static-analysis","code-quality","php","php7","phpstan"]},"audit":{"audit_score":95,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":[]},"install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add phpstan/phpstan","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Phpstan\" agent skill from https://github.com/phpstan/phpstan. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: PHP Static Analysis Tool - discover bugs in your code without running it!","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Phpstan\" as a Claude Code skill from https://github.com/phpstan/phpstan. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: PHP Static Analysis Tool - discover bugs in your code without running it!","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Phpstan\" from https://github.com/phpstan/phpstan into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: PHP Static Analysis Tool - discover bugs in your code without running it!","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"urls":{"web":"https://www.openagentskill.com/skills/phpstan-phpstan","api":"https://www.openagentskill.com/api/agent/skills/phpstan-phpstan","install_api":"https://www.openagentskill.com/api/skills/phpstan-phpstan/install","audit":"https://www.openagentskill.com/skills/phpstan-phpstan/audit","repository":"https://github.com/phpstan/phpstan"},"decision":{"readiness_score":100,"readiness_label":"Production-ready","headline":"Primary pick for Coding agents","role":"Primary pick","adoption_stage":"Adopt","primary_fit":"Coding agents","best_for":["Coding agents workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"proof_points":["13,997 GitHub stars","recent repository activity","install command or GitHub repo available","100/100 quality profile"],"next_steps":["Install it in a sandbox agent and run one Coding agents task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"use_cases":[{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"testing-qa","title":"Testing and QA","url":"https://www.openagentskill.com/use-cases/testing-qa"}],"recommendation_reasons":["Matches task terms: use, php, static, analysis","Strong GitHub adoption: 13,997 stars","Quality score 72/100","Install handoff is available","Repository freshness signal is available"],"reasoning":"Strong task match. Evidence: 14K GitHub stars, verified author, 72 quality score. PHP Static Analysis Tool - discover bugs in your code without running it!"}],"blocked_candidates":[{"slug":"alexanderwillner-things-sh","name":"Things.Sh","match_score":114.95593111239204,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/alexanderwillner-things-sh/audit"},{"slug":"janvanhaaren-soccer-analytics-resources","name":"Soccer Analytics Resources","match_score":90.45021488382383,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/janvanhaaren-soccer-analytics-resources/audit"},{"slug":"regel-loudml","name":"Loudml","match_score":64.76719935738714,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/regel-loudml/audit"},{"slug":"jxnblk-ok-mdx","name":"Ok Mdx","match_score":64.21144488012605,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Audit risk exceeds the requested agent policy","Audit classified this skill as risky","Audit risk risky exceeds max_risk=medium"]},"url":"https://www.openagentskill.com/skills/jxnblk-ok-mdx/audit"},{"slug":"b3nnyl-figgo","name":"Figgo","match_score":61.77588570592632,"safety_gate":{"tier":"blocked","label":"Blocked for auto-install","badge":"BLOCKED","summary":"This skill should not be selected by an agent without explicit human security review.","recommended_action":"Do not auto-install. Inspect the source, dependencies, and permission surface first.","auto_install_policy":"block","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access"]},"url":"https://www.openagentskill.com/skills/b3nnyl-figgo/audit"}],"suggested_composition":{"name":"exakat-php-static-analysis-tools-agent-stack","description":"Start with Php Static Analysis Tools, then add Setup Php + Phpstan only if the workflow needs extra coverage.","skills":["exakat-php-static-analysis-tools","shivammathur-setup-php","phpstan-phpstan"],"steps":["Prototype the task with Php Static Analysis Tools as the primary skill.","Add the second skill only if the first one leaves a capability gap.","Keep the third skill as a fallback during evaluation instead of installing everything at once."]},"suggested_stacks":[{"slug":"research-report-agent","name":"Research report agent stack","url":"https://www.openagentskill.com/collections/research-report-agent","use_case":"research-agents"},{"slug":"web-data-pipeline","name":"Web data pipeline stack","url":"https://www.openagentskill.com/collections/web-data-pipeline","use_case":"web-scraping"}],"meta":{"timestamp":"2026-06-17T10:34:12.816Z","api_version":"1.0","total_skills_searched":10180,"blocked_candidates":5,"safety_policy":"Blocked candidates are excluded from recommendations. Verified and reviewed candidates receive ranking priority.","public_search_endpoint":"https://www.openagentskill.com/api/skills/search","agent_friendly":true}}