phpcs-check-fix
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a legitimate workflow for PHP code linting and automatic fixing using industry-standard tools such as PHPCS and PHPCBF.
- [COMMAND_EXECUTION]: The instructions involve executing standard PHP development commands like 'composer cs:fix' and binaries in 'vendor/bin/'. These operations are local to the project environment and do not use untrusted input or suspicious arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes PHP source code and parses tool output to identify style violations. While these are external inputs, the interaction is scoped to formatting and code structure, with no evidence that malicious code within those files could influence the agent's behavior or override instructions.
Audit Metadata