php-filesystem-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for performing a security audit on PHP filesystem operations. It covers critical functions like mkdir, chmod, unlink, and symlink and focuses on identifying risks such as Time-of-Check to Time-of-Use (TOCTOU) and path normalization failures.- [SAFE]: No obfuscation, data exfiltration, or unauthorized command execution patterns were detected. The skill uses standard command-line tools like ripgrep (rg) for static analysis of source code.- [SAFE]: The instructions promote secure coding practices, such as binding path validation to the actual usage point to prevent race conditions and minimizing user control over filesystem permissions.
Audit Metadata