laravel-security
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational, providing secure coding patterns and configuration examples for Laravel developers.
- [SAFE]: Sensitive information such as API keys and database credentials are handled using environment variable placeholders (e.g.,
APP_KEY=,STRIPE_KEY=sk_live_...), adhering to secret management best practices. - [SAFE]: The skill explicitly warns against dangerous configurations, such as enabling
APP_DEBUGin production or using empty$guardedarrays in Eloquent models. - [SAFE]: External dependencies mentioned (e.g.,
htmlpurifier,laravel/passport) are well-known, reputable packages from trusted sources. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected.
Audit Metadata