laravel-models
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill encourages a security best practice by mandating the use of ULIDs (
identifiercolumn) for public-facing references in routes, API responses, and forms, effectively preventing internal database ID enumeration. - [COMMAND_EXECUTION]: The instructions include running
php artisan ide-helper:models, which is a standard development workflow command for the widely-usedbarryvdh/laravel-ide-helperpackage to maintain type hints. It does not process untrusted external input. - [NO_CODE]: The included PHP trait (
HasIdentifier.php) and base class (AbstractFilter.php) use standard Laravel features (HasUlids,Str::ulid(),Savingevents) to implement the described functionality safely. - [INDIRECT_PROMPT_INJECTION]: While the skill defines how to process model lookups from request data (e.g.,
firstOrFailby identifier), it relies on standard Laravel Eloquent ORM protections against SQL injection and follows typical application patterns with low vulnerability surface.
Audit Metadata