php-pro
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill definition contains no evidence of malicious behavior, obfuscation, or unauthorized access attempts. The instructions explicitly direct the AI to produce secure code that prevents injection and validation vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided PHP code and architectural requirements.
- Ingestion points: User-supplied PHP snippets and application logic described in prompts.
- Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: No execution tools, file system access, or network capabilities are requested or included in the skill definition.
- Sanitization: The skill includes a direct instruction to the model to prioritize 'Secure code preventing injection and validation vulnerabilities'.
- [NO_CODE]: The skill consists exclusively of markdown instructions and metadata (SKILL.md). It does not include or reference any scripts, binary files, or external executables.
Audit Metadata