php-http-psr
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate reference material and code templates for PHP HTTP standards. The instructions focus on correct usage of immutable message objects and implementation-agnostic factory patterns.
- [EXTERNAL_DOWNLOADS]: The skill references standard PHP packages and official documentation sites such as php-fig.org and packagist.org. These are well-known and trusted resources within the PHP development ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The provided code templates (e.g., HelloHandler and AuthMiddleware) demonstrate how to process HTTP request data like headers and attributes. While this represents a data ingestion surface that could technically be exploited if the agent were to blindly follow instructions found in HTTP headers, it is a standard and necessary implementation pattern for the documented use case and includes basic sanitization like json_encode in the error handler.
Audit Metadata