php-laravel
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides defensive programming guidelines and promotes security hardening measures such as secure session management, CSRF protection, and dependency auditing. All documented behaviors align with legitimate software engineering practices.
- [COMMAND_EXECUTION]: Instructions include standard Laravel development tools (Artisan, PHPUnit, PHPStan, Pint) for project maintenance and validation. All commands are limited to the local project environment and are intended for professional development workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes PHP source code, presenting an attack surface for instructions embedded in code.
- Ingestion points: PHP source files (**/*.php) as defined in the skill scope.
- Boundary markers: Not explicitly defined for local source code, though the skill mandates strict typing and DTOs for external data to prevent boundary confusion.
- Capability inventory: Local execution of artisan, phpunit, phpstan, pint, and composer.
- Sanitization: The skill promotes the use of Form Requests, DTOs, and adapters to sanitize external inputs and isolate third-party SDKs.
Audit Metadata