The Agent Skills Directory

[SAFE]: The skill consists of development guidelines and reference implementation for the Laravel framework. It encourages the use of structured data objects, which is a defensive coding practice that helps prevent data corruption and unexpected behavior.
[INDIRECT_PROMPT_INJECTION]: The skill includes instructions for transforming untrusted external data (e.g., from Stripe or PayPal webhooks) into internal DTOs. This represents a potential surface for indirect prompt injection if the ingested data is later processed by an LLM without further sanitization.
Ingestion points: Transformer methods defined in references/dto-transformers.md ingest raw array payloads from external service providers.
Boundary markers: The skill advocates for strict PHP type-hinting in DTO constructors, which provides a structural boundary for the data.
Capability inventory: Example code in SKILL.md demonstrates these DTOs being used in database operations within application Actions.
Sanitization: Input is sanitized through automatic type casting provided by the Spatie\LaravelData package and custom utility classes like EmailFormatter.

laravel-dtos