php
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance for PHP developers, including specific mitigations for OWASP Top 10 vulnerabilities.
- [SAFE]: It correctly identifies and warns against dangerous PHP functions such as
unserialize(),extract(), andsystem(), recommending safer alternatives likejson_decode()and Symfony's Process component. - [SAFE]: All external references target reputable community resources and official documentation, such as PHP.net, PHP-FIG, Packagist, and The Coding Machine's 'Safe' library on GitHub.
- [SAFE]: The skill encourages proactive security measures, such as using
composer auditto check for known vulnerabilities in dependencies.
Audit Metadata