laravel-multi-tenancy
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines standard software architecture patterns for Laravel applications, specifically focusing on multi-tenancy implementation using the
stancl/tenancypackage. - [COMMAND_EXECUTION]: The provided PHP testing traits (
ManagesTenants,RefreshDatabaseWithTenant) include logic for automated database management, such as creating, migrating, and deleting tenant databases during the test lifecycle. These are standard development operations. - [INDIRECT_PROMPT_INJECTION]: The skill documents methods for tenant identification via external inputs like request headers (
X-Tenant), subdomains, and domains. While these represent attack surfaces for the resulting application, the code samples follow established security practices for database scoping provided by the underlying library. - [DYNAMIC_EXECUTION]: The Pest testing configuration (
TenancyPest.php) dynamically scans the filesystem to load test files based on directory structure. This is a common pattern in PHP testing frameworks and does not involve executing untrusted or remote code.
Audit Metadata