migrate-php74-to-php80
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is designed to ingest and process external PHP codebases using automated tools. Maliciously crafted instructions within the source files could potentially attempt to influence the agent's logic during the migration process.
- Ingestion points: PHP source files from the target project (identified as codebase.php74).
- Boundary markers: Absent; there are no explicit instructions to the agent to disregard embedded comments or instructions within the processed code.
- Capability inventory: Shell execution of composer, rector, phpstan, and psalm.
- Sanitization: Absent; the skill does not include steps to sanitize or validate the content of the PHP files before processing them with CLI tools.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple command-line utilities to perform project analysis and automated refactoring. Evidence includes instructions to run 'vendor/bin/rector process' and 'composer why-not php 8.0'.
- [EXTERNAL_DOWNLOADS]: The migration workflow requires the installation of external development dependencies from standard registries. Evidence: Instructions to add 'rector/rector' as a dev dependency using Composer.
Audit Metadata