codeguard-php

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as php -l and php-cs-fixer fix to validate and format PHP code. It employs secure command-line patterns, notably utilizing find . -print0 | xargs -0 for batch processing files, which correctly handles filenames with special characters to prevent argument injection.\n- [DYNAMIC_EXECUTION]: The skill utilizes bash -c to execute assembled shell pipelines for linting. These pipelines are defined as static patterns within the reference files, minimizing the risk associated with dynamic command generation.\n- [INDIRECT_PROMPT_INJECTION]: The skill parses local PHP files as its ingestion point. It mitigates potential injection risks by using explicit output templates as boundary markers and employing sanitization practices, such as the -print0 flag for safe file path handling and a mandatory requirement for human verification of all automated modifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:47 AM