OverviewHistoryStatsSecurity
npx skills add ...
Documentation
SKILL.md
npx skills add asyrafhussin/agent-skills --skill php-best-practices
PHP 8.x modern patterns, PSR standards, and SOLID principles. Use when reviewing PHP code, checking type safety, auditing code quality, or ensuring PHP best practices. Triggers on "review PHP", "check PHP code", "audit PHP", or "PHP best practices".
npx skills add asyrafhussin/agent-skills --skill php-best-practices
Modern PHP 8.x patterns, PSR standards, type system best practices, and SOLID principles. Contains 51 rules for writing clean, maintainable PHP code.
Always check the project's PHP version before giving any advice. Features vary significantly across 8.0 - 8.5. Never suggest syntax that doesn't exist in the project's version.
Check composer.json for the required PHP version:
Also check the runtime version:
| Feature | Version | Rule Prefix |
|---|---|---|
| Union types, match, nullsafe, named args, constructor promotion, attributes | 8.0+ | type-, modern- |
| Enums, readonly properties, intersection types, first-class callables, never, fibers | 8.1+ | modern- |
| Readonly classes, DNF types, true/false/null standalone types | 8.2+ | modern- |
Typed class constants, #[\Override], json_validate() | 8.3+ | modern- |
Property hooks, asymmetric visibility, #[\Deprecated], new without parens | 8.4+ | modern- |
| Pipe operator ` | >` | 8.5+ |
Only suggest features available in the detected version. If the user asks about upgrading or newer features, mention what becomes available at each version.
Reference these guidelines when:
| Priority | Category | Impact | Prefix | Rules |
|---|---|---|---|---|
| 1 | Type System | CRITICAL | type- | 9 |
| 2 | Modern PHP Features | CRITICAL | modern- | 16 |
| 3 | PSR Standards | HIGH | psr- | 6 |
| 4 | SOLID Principles | HIGH | solid- | 5 |
| 5 | Error Handling | HIGH | error- | 5 |
| 6 | Performance | MEDIUM | perf- | 5 |
| 7 | Security | CRITICAL | sec- | 5 |
type-strict-mode - Declare strict types in every filetype-return-types - Always declare return typestype-parameter-types - Type all parameterstype-property-types - Type class propertiestype-union-types - Use union types effectivelytype-intersection-types - Use intersection typestype-nullable-types - Handle nullable types properlytype-void-never - Use void/never for appropriate return typestype-mixed-avoid - Avoid mixed type when possible8.0+:
modern-constructor-promotion - Constructor property promotionmodern-match-expression - Match over switchmodern-named-arguments - Named arguments for claritymodern-nullsafe-operator - Nullsafe operator (?->)modern-attributes - Attributes for metadata8.1+:
modern-enums - Enums instead of constantsmodern-enums-methods - Enums with methods and interfacesmodern-readonly-properties - Readonly for immutable datamodern-first-class-callables - First-class callable syntaxmodern-arrow-functions - Arrow functions (7.4+, pairs well with 8.1 features)8.2+:
modern-readonly-classes - Readonly classes8.3+:
modern-typed-constants - Typed class constants (const string NAME = 'foo')modern-override-attribute - #[\Override] to catch parent method typos8.4+:
modern-property-hooks - Property hooks replacing getters/settersmodern-asymmetric-visibility - public private(set) for controlled access8.5+:
modern-pipe-operator - Pipe operator (|>) for functional chainingpsr-4-autoloading - Follow PSR-4 autoloadingpsr-12-coding-style - Follow PSR-12 coding stylepsr-naming-classes - Class naming conventionspsr-naming-methods - Method naming conventionspsr-file-structure - One class per filepsr-namespace-usage - Proper namespace usagesolid-srp - Single Responsibility: one reason to changesolid-ocp - Open/Closed: extend, don't modifysolid-lsp - Liskov Substitution: subtypes must be substitutablesolid-isp - Interface Segregation: small, focused interfacessolid-dip - Dependency Inversion: depend on abstractionserror-custom-exceptions - Create specific exceptions for different errorserror-exception-hierarchy - Organize exceptions into meaningful hierarchyerror-try-catch-specific - Catch specific exceptions, not generic \Exceptionerror-finally-cleanup - Use finally for guaranteed resource cleanuperror-never-suppress - Never use @ error suppression operatorperf-avoid-globals - Avoid global variables, use dependency injectionperf-lazy-loading - Defer expensive operations until neededperf-array-functions - Use native array functions over manual loopsperf-string-functions - Use native string functions over regexperf-generators - Use generators for large datasetssec-input-validation - Validate and sanitize all external inputsec-output-escaping - Escape output based on context (HTML, JS, URL)sec-password-hashing - Use password_hash/verify, never MD5/SHA1sec-sql-prepared - Use prepared statements for all SQL queriessec-file-uploads - Validate file type, size, name; store outside web rootFor detailed examples and explanations, see the rule files:
When auditing code, output findings in this format:
Example:
Read individual rule files for detailed explanations:
php -v # e.g. PHP 8.3.12<?php
declare(strict_types=1);
// 8.0+ Constructor promotion + readonly (8.1+)
class User
{
public function __construct(
public readonly string $id,
private string $email,
) {}
}
// 8.1+ Enums with methods
enum Status: string
{
case Active = 'active';
case Inactive = 'inactive';
public function label(): string
{
return match($this) {
self::Active => 'Active',
self::Inactive => 'Inactive',
};
}
}
// 8.0+ Match expression
$result = match($status) {
'pending' => 'Waiting',
'active' => 'Running',
default => 'Unknown',
};
// 8.0+ Nullsafe operator
$country = $user?->getAddress()?->getCountry();
// 8.3+ Typed class constants + #[\Override]
class PaymentService extends BaseService
{
public const string GATEWAY = 'stripe';
#[\Override]
public function process(): void { /* ... */ }
}
// 8.4+ Property hooks + asymmetric visibility
class Product
{
public string $name { set => trim($value); }
public private(set) float $price;
}
// 8.5+ Pipe operator
$result = $input
|> trim(...)
|> strtolower(...)
|> htmlspecialchars(...);file:line - [category] Description of issuesrc/Services/UserService.php:15 - [type] Missing return type declaration
src/Models/Order.php:42 - [modern] Use match expression instead of switch
src/Controllers/ApiController.php:28 - [solid] Class has multiple responsibilitiesrules/modern-constructor-promotion.md
rules/type-strict-mode.md
rules/solid-srp.md