appwrite-php
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the official Appwrite PHP SDK using standard installation methods (Composer). All external references target the legitimate Appwrite vendor infrastructure.
- [SAFE]: Secret management is handled via environment variables (
getenv('APPWRITE_API_KEY')), which is a recommended security practice to prevent hardcoding sensitive credentials. - [SAFE]: The documentation includes explicit security guidance for Server-Side Rendering (SSR) authentication, specifically highlighting the importance of
httpOnly,secure, andsameSitecookie attributes to mitigate XSS and CSRF risks. - [SAFE]: The 'Permissions & Roles' section provides critical warnings against common security pitfalls, such as assigning public write permissions (
Role::any()) to sensitive resources.
Audit Metadata