The Agent Skills Directory

[Network Communication]: The script scripts/phpcheck.js uses the fetch API to retrieve HTTP headers from external URLs. This is the intended purpose of the skill to identify the advertised PHP version. The script includes safety checks to validate that the provided URL uses standard protocols (HTTP/HTTPS) and does not contain embedded credentials or control characters.
[Processing Untrusted Data]: The skill ingests data from remote servers via HTTP headers (Server and X-Powered-By). While this represents a surface for indirect prompt injection—where a malicious server could theoretically provide unexpected text in its headers—the script mitigates this by using strict regular expressions to extract only version-formatted strings.
[Dependency Management]: The skill uses built-in Node.js modules (node:util and fetch) and does not rely on third-party package managers or external script execution, which minimizes the supply chain risk.

phpcheck-url