planning-filament
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to generate Markdown documentation (technical plans) for Laravel applications using the Filament framework. All identified file paths (e.g.,
app/Filament/Resources/,app/Models/,plans/) are standard for the Laravel ecosystem and do not involve sensitive system directories. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied feature descriptions to generate technical plans.
- Ingestion points: User input for 'Feature Description' and 'Target Panel Context' (SKILL.md).
- Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: The skill uses tools to write files (
plans/{feature}.md) and query documentation via the Laravel Boost MCP tool. - Sanitization: Not explicitly mentioned, but the risk is low as the output is intended to be static technical documentation for developer review.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill mentions invoking an MCP tool (
generate_filament_plan), which is a local capability of the agent platform for scaffolding, not an untrusted remote execution vector.
Audit Metadata