# Audit Legacy Controller

> Read the legacy `Admin{Domain}sController.php` without modifying it. Extract every field rendered, every action method, and every `Hook::exec()` call.

- Skill: `gabrielmoreira/audit-legacy-controller` (Agent Skill)
- Install (CLI): `npx skillmds@latest add gabrielmoreira/audit-legacy-controller`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gabrielmoreira/audit-legacy-controller/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Web & Frontend
- Author: gabrielmoreira (https://skillmd.com/u/gabrielmoreira)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/gabrielmoreira/audit-legacy-controller

---


# audit-legacy-controller

## Instructions

1. Open `controllers/admin/Admin{Domain}sController.php` — read the full file.
2. List every public action method: `renderList`, `renderForm`, `postProcess`, `ajaxProcess*`, any custom method.
3. For each form field in `renderForm()`, record: field name, type (text/select/checkbox/file), whether it is translatable, whether it is required.
4. Record every DB column accessed in `getList()` or `renderList()` — these map to grid columns.
5. Record every filter defined in `renderList()` — these map to grid filter types.
6. List every `Hook::exec()` call with the hook name and arguments passed.
7. Note any multistore-specific branches (`if (Shop::isFeatureActive())`).
8. Record whether the controller handles file uploads (logo, image).
9. Output: a structured field map grouped by (form fields, list columns, filters, hooks, actions).

## Rules

- Never modify the controller file — this is a read-only audit
- Note every `ObjectModel` method called (`save()`, `update()`, `delete()`) to inform handler implementation
- Flag any field that uses `Tools::getValue()` directly without validation — these need ValueObject wrapping
- Record position/sort fields explicitly — they trigger `create-position-column` (G)