php-ecosystem-reference
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides orientation links to official and well-known project documentation for Symfony, API Platform, and Slim.
- [SAFE]: The skill explicitly defines routing boundaries, correctly handing off Laravel-specific tasks and acknowledging gaps in full-stack Symfony expertise to prevent unverified code generation.
- [SAFE]: The mandatory workflow involves spawning specialized agents for research and codebase exploration, which ensures that project actions are based on current, verified data rather than static instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface where project metadata (composer.json) is read to determine project context. This surface is well-contained within the intended orientation functionality.
- Ingestion points: The explore-codebase agent reads composer.json as specified in the mandatory workflow.
- Boundary markers: The skill provides clear instructions that it is for orientation only and requires external verification for implementation details.
- Capability inventory: The skill identifies shell execution capabilities via composer require for package management.
- Sanitization: The skill does not explicitly mention sanitization of the project manifest content, but its usage is restricted to orientation.
Audit Metadata