php-pro
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a link to documentation hosted on
jeffallan.github.io. Automated security scanners flagged this URL as blacklisted; however, the domain belongs to the skill's author and is used to host legitimate documentation for the developer skill set. - [COMMAND_EXECUTION]: The instructions encourage the use of standard industry CLI tools for PHP development, specifically
composerfor dependency management,phpstanfor static analysis, andphpunit/pestfor unit testing. These are executed within the user's development environment as part of the intended workflow. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided PHP code and architectural designs. It promotes the use of strict typing (
declare(strict_types=1)) and PHPStan Level 9, which helps ensure that processed code conforms to expected types and structures, reducing the risk of accidental execution of malicious code snippets passed through user input.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata