create-php-attribute
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard development workflow for PHP attributes without introducing external dependencies or risky execution patterns.
- [CREDENTIALS_UNSAFE]: Includes explicit security requirements to prevent the storage of secrets in attribute metadata.
- [COMMAND_EXECUTION]: The instructions do not involve shell commands or the execution of untrusted code; they focus on code structure and reflection.
- [PROMPT_INJECTION]: The skill addresses the risk of indirect prompt injection by mandating that reflected metadata be treated as untrusted code-level metadata and requiring explicit consumer enforcement of security policies.
Audit Metadata