[CompleteDotTech]

Agents using php2shell-check now have an installable skill that explains how to locate the checker, prepare authorized inputs, run the real CLI, preserve reports, and interpret uncertainty without claiming exploitability. For example, a vendor-qualified PHP version remains unknown, and a completed process is distinguished from a successful fetch.

The README documents skill installation and invocation. New AGENTS.md captures the repository's implementation and validation constraints, and CLAUDE.md directs Claude to those shared instructions and the README. The checker and its dependencies are unchanged.

Validation: all 43 local-only unit tests pass, CLI help succeeds, the skill-creator validator passes, and git diff --check is clean. Independent subagent review of commit 7939fb8 found zero actionable issues. A separate localhost forward test verified the documented JSON workflow and its two-request footprint. All four Python/OS jobs passed in both the PR and push workflows (eight green checks). No production websites were scanned; fresh-session automatic skill discovery was not tested.

Closes #4.

[CompleteDotTech]

Independent subagent review completed for head 7939fb8062c79a6aa60e25ce28e5cb1a71c4de84 against base 0da54dd1c55f25a9d0d3444ccf8516393c6da0be: zero actionable findings across all five changed files.

The reviewer checked the skill against the CLI/source, command help, offline vendor-qualified and conflicting-version assessments, and path/metadata consistency. A separate Level 3 evaluator followed the skill against a temporary localhost fixture: exit 0, exactly /robots.txt and / requested, one JSON result with PHP evidence, rule date, and not_tested exploitability. Temporary artifacts were removed and the checkout remained clean. No external website scan was performed. Fresh-session skill discovery was not exercised.

Coordinator validation: 43 unit tests passed, skill-creator validation passed, local document links/UI metadata passed, and all eight GitHub checks across push and PR runs succeeded. Review submitted by the coordinator on behalf of the independent subagents; this is a review record, not a separate GitHub-account approval.