laravel8-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to review user-provided Laravel code, which creates a potential surface for indirect prompt injection if malicious instructions are embedded within the code samples provided by a user. * Ingestion points: The skill triggers when the user shares Laravel code for review (SKILL.md). * Boundary markers: Absent. * Capability inventory: The skill does not contain executable scripts but provides architectural guidance and generates PHP code snippets. * Sanitization: Absent.
- [SAFE]: The skill consistently promotes security best practices, including the use of CSRF protection, mass assignment protection, and parameterized queries to prevent SQL injection. It provides accurate guidance on using .env files for secrets management and implementing proper authorization policies.
Audit Metadata