Will it flag every single number in my code?

No, it is designed to ignore 'acceptable' magic values like loop initializations (i=0), mathematical identities, and boolean literals to reduce false positives.

How does this help with Clean Architecture?

It encourages the separation of configuration from logic and promotes the use of named constants, which is essential for maintaining a clean, decoupled architecture.

What are magic values in PHP code?

Magic values are hardcoded literals—like numbers, strings, or array indices—that appear in code without explanation. They make code harder to maintain because their purpose is unclear and they are difficult to update globally.

Can this skill identify security risks?

Yes, it specifically scans for hardcoded API keys, secrets, and credentials (like 'sk_live') which are classified as critical security vulnerabilities.

Does it support modern PHP 8 features?

Absolutely. The skill suggests modern patterns such as PHP 8 Enums for string literals and DTOs for complex array structures.

PHP Magic Value Checker

Name: PHP Magic Value Checker
Author: dykyi-roman

bydykyi-roman

•

Seguridad y Pruebas

Analyzes PHP source code to identify and refactor hardcoded magic values into maintainable constants, enums, or configuration.

This Claude Code Skill streamlines the refactoring of PHP applications by identifying unexplained literals, hardcoded configuration, and magic numbers that hinder maintainability. It scans for patterns such as raw HTTP status codes, time intervals, and string literals, helping developers adhere to Clean Architecture and SOLID principles. By providing actionable suggestions to replace brittle code with named constants or environment variables, it ensures codebases remain self-documenting and easier to modify.

Características Principales

01Identifies magic numbers, strings, and hardcoded array indices

02Detects embedded configuration values and sensitive API keys

03Includes pre-defined grep patterns for rapid repository-wide audits

0445 GitHub stars

05Suggests PHP-specific refactorings using Enums, Constants, and DTOs

06Flags unexplained regex patterns and raw HTTP status codes

Casos de Uso

01Standardizing HTTP response handling and time-based logic across large applications

02Auditing projects for security risks like hardcoded credentials or API keys

03Refactoring legacy PHP codebases to improve readability and maintainability

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add dykyi-roman/awesome-claude-code check-magic-values

For use in Claude.ai and ChatGPT

Download Skill