The Agent Skills Directory

[SAFE]: The skill explicitly prohibits dangerous PHP practices including the use of eval(), extract(), and raw SQL string concatenation, enforcing prepared statements for all database operations.
[SAFE]: Detailed security guidelines are provided for XSS prevention (using htmlspecialchars), CSRF protection, and secure password hashing using password_hash() with PASSWORD_BCRYPT.
[SAFE]: The skill promotes secure credential management by instructing the agent to use environment variables instead of hardcoding secrets in the codebase.
[SAFE]: No patterns indicative of data exfiltration, remote code execution, obfuscation, or persistence mechanisms were found. All provided code examples follow standard, secure PHP architectural patterns.

php74-expert