ports-and-adapters
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for architectural refactoring and provides legitimate templates for Symfony applications. No malicious instructions, data exfiltration patterns, or obfuscation were detected.
- [COMMAND_EXECUTION]: The skill includes a checklist suggesting the use of standard development tools (
composer,phpstan,ripgrep) for validation. These are routine development operations and do not represent a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: The skill processes project source code using search and read capabilities. While reading untrusted code inherently carries a risk of indirect prompt injection, the skill mitigates this by instructing the agent to adhere to existing project patterns and validate changes in checkpoints. The attack surface is consistent with the skill's primary purpose as a development aid.
Audit Metadata