laravel-livewire
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an educational and reference resource for the Laravel Livewire framework. It contains code snippets, architectural advice, and implementation templates that follow standard industry practices and framework conventions.\n- [COMMAND_EXECUTION]: The documentation includes standard PHP and Laravel commands for project maintenance and package management, such as using Composer to install dependencies and Artisan for server configuration (e.g.,
php artisan install:broadcasting).\n- [EXTERNAL_DOWNLOADS]: The skill refers to official and well-known Laravel ecosystem packages (e.g., Folio, Reverb, Precognition) available through public registries like Packagist and NPM.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for handling user-controlled data. \n - Ingestion points: User input fields (e.g.,
title,contentinCreatePost.php), URL query parameters defined via the#[Url]attribute, and dynamic route segments in Folio.\n - Boundary markers: The skill mandates the use of the
#[Validate]attribute for all public inputs and the#[Locked]attribute for sensitive properties (like database IDs) to prevent unauthorized client-side manipulation.\n - Capability inventory: The components perform database operations (create, update, delete) within authorized contexts, interact with storage for file uploads, and dispatch events for component communication.\n
- Sanitization: All Blade templates utilize standard
{{ $var }}syntax which provides automatic XSS protection via HTML escaping.
Audit Metadata