typo3-fractor
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill describes legitimate development workflows using recognized community tools for TYPO3 upgrades.
- [EXTERNAL_DOWNLOADS]: The instructions involve downloading the 'a9f/typo3-fractor' meta-package from Packagist, which is the official repository for PHP packages.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted project files. 1. Ingestion points: Project directories like '/Configuration/' and '/Resources/' specified in the configuration file. 2. Boundary markers: The skill does not specify boundary markers for the processed content. 3. Capability inventory: CLI-based file-write operations. 4. Sanitization: The skill relies on the tool's internal parsers for Fluid, TypoScript, and XML.
- [DYNAMIC_EXECUTION]: The tool executes a PHP-based configuration file ('fractor.php') to load project-specific rules, which is a standard pattern for PHP-based development tools.
Audit Metadata