appwrite-php
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill demonstrates secure credential management by using environment variables (
getenv()) for API keys and project IDs instead of hardcoding secrets. - [SAFE]: Detailed guidance is provided for server-side session management, specifically recommending the use of
httpOnly,secure, andsameSitecookie flags to mitigate XSS and CSRF risks. - [SAFE]: The instructions include security-conscious documentation for resource permissions, including warnings against granting broad access to unauthenticated guests via
Role::any(). - [EXTERNAL_DOWNLOADS]: The skill references the official
appwrite/appwritepackage via Composer. This is a standard installation from the vendor's official distribution channel.
Audit Metadata