php-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests PHP file content for inspection, which creates an attack surface for instructions embedded in code comments or metadata.\n
- Ingestion points: Content of PHP files specified in the
filePathparameter for theget_inspectionstool.\n - Boundary markers: Absent; the skill lacks specific instructions or delimiters to prompt the agent to ignore instructions found within the code under review.\n
- Capability inventory: The agent can modify local files using the
apply_quick_fixtool.\n - Sanitization: No sanitization or safety filtering of the analyzed file content is implemented before it is processed by the agent.
Audit Metadata