api-platform-serialization
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a checklist for executing standard local development and validation tools, such as
./vendor/bin/phpunit,./vendor/bin/phpstan, andphp bin/console. These commands are used to verify functional behavior and code quality within a Symfony project environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify PHP codebase artifacts (resources, DTOs, providers). This creates an ingestion surface where the agent could potentially encounter and process untrusted instructions embedded in the code it is tasked to manage.
- Ingestion points: Reads local resource, DTO, and configuration files (SKILL.md workflow).
- Boundary markers: None identified in the instructions to distinguish between developer code and potential embedded instructions.
- Capability inventory: The skill uses
Edit,Write, andBash(shell) tools to modify code and execute validation scripts. - Sanitization: No specific sanitization or escaping of ingested file content is mentioned.
Audit Metadata