codeguard-php
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
php -landphp-cs-fixer fixto validate and format PHP code. It employs secure command-line patterns, notably utilizingfind . -print0 | xargs -0for batch processing files, which correctly handles filenames with special characters to prevent argument injection.\n- [DYNAMIC_EXECUTION]: The skill utilizesbash -cto execute assembled shell pipelines for linting. These pipelines are defined as static patterns within the reference files, minimizing the risk associated with dynamic command generation.\n- [INDIRECT_PROMPT_INJECTION]: The skill parses local PHP files as its ingestion point. It mitigates potential injection risks by using explicit output templates as boundary markers and employing sanitization practices, such as the-print0flag for safe file path handling and a mandatory requirement for human verification of all automated modifications.
Audit Metadata