laravel-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of established Laravel community packages, specifically
php-open-source-saver/jwt-authfor authentication andspatie/laravel-query-builderfor API filtering and sorting. These are well-known, reputable resources within the PHP ecosystem. - [COMMAND_EXECUTION]: The instructions include standard Laravel development operations using the Artisan CLI, such as publishing vendor configurations and generating security secrets (
php artisan jwt:secret). These commands are essential for routine application setup and security configuration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements to generate API code. It utilizes structured PHP templates in the
assets/templates/directory to constrain output format. The instructions explicitly mandate the use of Laravel Form Requests for input validation and sanitization, providing a clear security boundary for data processed at runtime. All capabilities, including package installation and command execution, are tied to standard project initialization workflows.
Audit Metadata