laraveldaily-permissions-audit
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a purely instructional set for auditing PHP source code. It guides the agent to look for architectural and security weaknesses in Laravel applications without requiring any dangerous system permissions or external network access.
- [PROMPT_INJECTION]: The skill involves processing untrusted third-party PHP source code, which creates a surface for indirect prompt injection (e.g., malicious comments within the audited code attempting to deceive the analysis).
- Ingestion points: The skill instructs the agent to scan all PHP source files in the project (SKILL.md).
- Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions within the source code being analyzed.
- Capability inventory: The skill is limited to text analysis and report generation; it does not utilize shell commands, file writing capabilities, or network tools.
- Sanitization: The instructions do not define sanitization or validation logic for the content of the files being read.
Audit Metadata