Axguard Path — Development skill for Claude Code
Path traversal / LFI — open/join, send_file, PHP include with variables.
How to install Axguard Path
Installs to ~/.claude/skills/awarexone-axguard-axguard-path/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-path && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-path.md -o ~/.claude/skills/awarexone-axguard-axguard-path/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard Path does
description: Path traversal / LFI — open/join, send_file, PHP include with variables. Usage: /axguard-path [path]
/axguard-path
**Specialist:** Path Traversal Hunter
Usage
/axguard-path
/axguard-path ./api
Focus
open/Pathjoins with variable segmentssend_file/sendFile/res.downloadwith user paths- PHP
include/requirewith$variables
Steps
- Scan → keep
path.*. - Resolve whether
..or absolute paths can escape the intended root
Alternatives in Development
- PHP Lsp — PHP /plugin install php-lsp@claude-plugins-official 14k ★
- Releasing — This project ships as a Claude Code plugin 10.9k ★
- Param Discover — Discover hidden HTTP parameters on a URL or list of URLs using Arjun (or x8 fallback) 4.5k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Axguard Cloud
Cloud and CORS misconfig — metadata URLs, wildcard origins. Usage: /axguard-cloud [path]
Env
Manage Vercel environment variables. Commands include list, pull, add, remove, and diff. Use to sync environme
Three Axes Handoff
Generate a session continuity document for handing work to a fresh session. Usage: /three-axes-handoff output
Multi Signal Keyword Attribution
Free, open BigQuery skill for the (not provided) gap. Estimates which GSC queries drive GA4 conversions and re
Send Approval
Send one message you have already approved. Usage — "/send-approval appr_xxxxxx". Refuses anything not already
Related Agents
Seam Auditor
Composition adversary - finds two correct units whose join lies. Orthogonal to the house happy/sad-path signat
File Upload
File Upload vulnerability specialist (H1 #39). Use for testing upload restrictions, content-type bypass, exten
Impl Filesystem
Reviews implementation plans from a filesystem and I/O perspective. Use when evaluating atomic writes, file lo