bagisto-coding-standards
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents security best practices for Bagisto, including instructions on preventing XSS via escaping, avoiding SQL injection by using parameterization, and mitigating IDOR through query scoping.
- [SAFE]: References to sensitive files like
.envand configuration paths (e.g.,bootstrap/providers.php) are purely instructional, providing guidance on how to manage these files within the Laravel/Bagisto framework correctly. - [SAFE]: Mentions of local development tools and commands, such as
vendor/bin/pintandphp artisan, are standard for the development lifecycle of the platform. - [SAFE]: The skill explicitly describes how to use sanitization tools like the
Purifyhelper to prevent template injection and other malicious content in stored data. - [SAFE]: Although the skill processes external code (Category 8), it provides detailed instructions for application-level sanitization and security boundaries to ensure that the code the agent writes or reviews is robust against injection attacks.
Audit Metadata