The Agent Skills Directory

[SAFE]: The skill provides accurate and secure configuration examples for production environments, such as disabling debug mode, generating application keys, and enforcing HTTPS.
[SAFE]: The authentication and authorization sections correctly demonstrate the use of Laravel Sanctum, Gates, and Policies to implement robust access control.
[SAFE]: The Eloquent section provides correct guidance on preventing mass assignment vulnerabilities and SQL injection by emphasizing the use of fillable attributes and parameterized queries.
[SAFE]: The XSS and CSRF sections accurately describe how to use Laravel's built-in protections and provide safe alternatives for handling raw HTML content through whitelisting and purification.
[SAFE]: Secret management advice correctly instructs users to keep environment files out of version control and use dedicated secret managers in production.
[CREDENTIALS_UNSAFE]: The skill contains example placeholders for secrets such as APP_KEY=base64:abc123... and STRIPE_KEY=sk_live_.... These are clearly identifiable as illustrative examples within documentation and do not represent leaked production credentials.

laravel-security