php-audit-pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-level orchestrator and methodology guide for PHP security auditing. It outlines a multi-stage pipeline (Recon, Modeling, Trace-based analysis, Reporting) and defines clear templates for vulnerability assessment and risk scoring. It does not contain executable code, and all references to system functions (e.g., exec, system) are within the context of security 'sinks' to be identified during the audit process, not commands to be executed by the agent itself. Instructions are transparent, well-documented, and align with security best practices.
Audit Metadata