The Agent Skills Directory

[SAFE]: The skill provides documentation and code templates for API testing without any detected malicious patterns or instructions.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of API responses and resource definitions, which constitutes an ingestion point for external data. However, the skill is specifically designed to perform functional assertions and schema validation on this data, providing inherent boundaries and sanitization within the testing workflow.
Ingestion points: API response data processed in reference.md using $response->toArray().
Boundary markers: The skill emphasizes the use of assertMatchesResourceItemJsonSchema and assertJsonContains to strictly validate structure and content.
Capability inventory: Uses standard PHP assertions and shell-based test runners (PHPUnit, PHPStan) in SKILL.md.
Sanitization: Validation logic is integrated into the test assertions to ensure data conforms to expected schemas.
[COMMAND_EXECUTION]: The skill instructions include standard development commands for package management and test execution.
Evidence: composer require --dev, ./vendor/bin/phpunit, and ./vendor/bin/phpstan are referenced in reference.md and SKILL.md. These are appropriate for the skill's purpose as a developer tool.

api-platform-tests