laravel-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and community resources from trusted sources, including the official Laravel documentation (laravel.com), PHP documentation (php.net), and well-known public GitHub repositories (github.com/laravel, github.com/alexeymezenin). These references are documented neutrally and are consistent with the skill's educational purpose.
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected. The instructions focus strictly on legitimate development patterns and validation techniques.
- [DATA_EXFILTRATION]: No unauthorized network operations or sensitive file path access were identified. Code examples involving network requests (e.g., Http::post) use clearly marked non-functional placeholder domains like 'example.com' to illustrate event-driven architecture.
- [COMMAND_EXECUTION]: The skill provides CLI examples for standard Laravel maintenance and development tasks, such as generating resource controllers (php artisan make:controller) and running database pruning (php artisan model:prune), which are expected for this use case.
- [OBFUSCATION]: No hidden content, encoded strings, zero-width characters, or homoglyph attacks were found. The skill content is presented in clear, human-readable text and code.
- [DYNAMIC_EXECUTION]: The skill documents standard framework features such as model observers and lifecycle events. It does not include unsafe dynamic execution patterns like eval(), exec(), or unauthorized deserialization of untrusted data.
Audit Metadata