laravel-inertia-vue
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the flow of data from external backend sources into the component context, creating a potential surface for indirect prompt injection if the ingested data contains malicious instructions.
- Ingestion points: Data is ingested through defineProps (rules/page-props-typing.md) and the usePage composable (rules/shared-auth-user.md).
- Boundary markers: The patterns do not include explicit delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill leverages the Inertia router and useForm for network-based operations such as POST and DELETE requests (rules/nav-programmatic.md).
- Sanitization: The skill relies on default framework sanitization but does not provide specific guidance for escaping untrusted content before interpolation.
Audit Metadata