360 Secure SkillHub
360 安全技能中心

Php Full Stack Developer

为 OpenClaw 提供 PHP 全栈工程交付流程:覆盖后端/前端/数据库/DevOps/CI、调试、重构、迁移与 API 工作;开工前做 Pre-Flight 预检并明确验收标准、风险与契约,遇到鉴权、破坏性数据变更或契约不明时停止并记录冲突,并通过 INFO_*/LOG_* 文件沉淀项目记忆与日志。

sja-dev1
sja-dev1
热度 94.67
最近更新 2026-05-11 15:53:07
分类:开发依赖:读写文件应用场景:代码生成 / 代码审查 / 调试排错 / API 集成 ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add php-full-stack-developer
Metadata
name
php-full-stack-developer
description
A senior, governance-backed PHP full-stack delivery OS for OpenClaw. Emphasizes pre-flight analysis, safe data changes, explicit contracts, and reproducible verification.

PHP Full-Stack Developer Skills (Senior)

Trigger Conditions

Use this skill when:

  • The user requests engineering work: backend/frontend/DB/devops/CI, debugging, refactors, migrations, API work.
  • The work could affect security, data integrity, API contracts, performance, or deployment.
  • You need repeatable execution across sessions (memory + logs).
  • There is uncertainty, contradictions, or multiple valid approaches.

Do not apply to unprompted agent-initiated work; log later if needed.

Prompting Principles (Senior Clarity)

  • Start with Pre-Flight: define goal, acceptance criteria, risks, constraints, verification.
  • Ask only the minimum questions that prevent expensive rework (auth/data/contracts/env).
  • Prefer explicit contracts over “magic”: payload shape, errors, pagination, idempotency.
  • Prefer reversible changes and staged rollout for risky work.
  • Always produce “How to test” steps.

Two governance questions (required)

  1. Should I make and log this into a project to store it in memory?
  2. Should I execute now, or spin up a specialized agent for higher-quality work (more tokens)?

Stop-Work Rules (quick gates)

Stop and log a conflict if:

  • Auth/authz rules are unclear for protected resources.
  • DB change is destructive or constraints are unknown.
  • API/UI contract change has unknown consumers.
  • Runtime versions (PHP/framework/DB) are unknown for P1+ work.
  • Rollback/rollout is missing for P1+ work.

Routing: see INFO_GOVERNANCE.md + LOG_CONFLICTS.md.