appwrite-php

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill demonstrates secure credential management by using environment variables (getenv()) for API keys and project IDs instead of hardcoding secrets.
  • [SAFE]: Detailed guidance is provided for server-side session management, specifically recommending the use of httpOnly, secure, and sameSite cookie flags to mitigate XSS and CSRF risks.
  • [SAFE]: The instructions include security-conscious documentation for resource permissions, including warnings against granting broad access to unauthenticated guests via Role::any().
  • [EXTERNAL_DOWNLOADS]: The skill references the official appwrite/appwrite package via Composer. This is a standard installation from the vendor's official distribution channel.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 04:06 PM
Security Audit — agent-trust-hub — appwrite-php