api-platform-dto-resources
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read, analyze, and modify PHP source code within a user's project, creating a surface for indirect prompt injection where malicious instructions could be embedded in the code being processed.
- Ingestion points: Project files are accessed using the
Read,Glob, andGreptools as part of the mapping and implementation workflow. - Capability inventory: The skill requires the ability to modify files (
Write,Edit) and execute shell commands (Bash) for validation and debugging. - Boundary markers: No explicit instructions are provided to the agent to distinguish between implementation code and potentially malicious instructions within the source files.
- Sanitization: The skill does not define methods for sanitizing or filtering the content of the ingested project files before processing.
Audit Metadata