typo3-rector
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review diffs from external PHP source code files during the migration process. This creates an attack surface where malicious instructions could be embedded in the code being analyzed to influence the agent's behavior.
- Ingestion points: Local PHP source files located in the project's
packagesorpublic/typo3conf/extdirectories as specified in the Rector configuration. - Boundary markers: The instructions do not explicitly define boundary markers or instruct the agent to ignore instructions embedded within the PHP code files.
- Capability inventory: The skill utilizes shell command execution for package management (
composer) and running the Rector tool (ddev exec vendor/bin/rector). - Sanitization: There is no evidence of sanitization or filtering of the content read from the source files before it is processed by the agent.
Audit Metadata