laravel-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and code examples intended to guide an AI agent in following Laravel development standards. No malicious code, obfuscation, or unauthorized network activity was found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify user-provided Laravel code, which serves as an ingestion point for untrusted data. However, the risk is mitigated by the skill's core purpose of enforcing security best practices.
- Ingestion points: User-provided PHP files (controllers, models, etc.) in the working directory.
- Boundary markers: Not explicitly defined within the skill content.
- Capability inventory: The skill instructions imply file read/write access for code review and refactoring tasks, as well as access to documentation via a search tool.
- Sanitization: The skill contains specific rules (e.g., in
rules/security.md) directing the agent to implement validation, escaping, and parameter binding.
Audit Metadata