move-site-to-laravel-cloud
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs standard shell utilities for database export (mysqldump), data synchronization (rclone), and server configuration management (nginx, service reload).
- [EXTERNAL_DOWNLOADS]: References specific, well-known PHP dependencies (league/flysystem-aws-s3-v3 and spatie/laravel-flare) to be installed via composer as part of the application upgrade process.
- [DATA_EXFILTRATION]: Facilitates the movement of site data (database dumps and file storage) to remote cloud environments. Safeguards include avoiding plaintext secret storage, utilizing environment variables for bucket credentials, and requiring off-site backup storage.
- [PRIVILEGE_ESCALATION]: Requires administrative access (sudo) for web server reloads and performs permission hardening (chmod 600) on sensitive data exports to prevent unauthorized access.
- [INDIRECT_PROMPT_INJECTION]: The skill acts on various inputs from the source server (logs, crontabs, filesystem metadata). It manages this ingestion through a phased verification process and explicit human-in-the-loop checkpoints before any destructive or significant changes.
Audit Metadata