code-quality-grumphp
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill configures standard PHP development tools (GrumPHP, PHPStan, PHPCS, Pest, Pint) using well-known packages from the Laravel ecosystem.
- [SAFE]: Explicit instructions are provided to the agent to never bypass Git hooks (e.g., using
--no-verify) and to always propose fixes to the user rather than applying them silently, which maintains user control and oversight. - [SAFE]: Configuration files for the tools are provided as static assets, and manual invocation commands use local vendor binaries.
Audit Metadata