laravel-providers
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust environment configuration pattern that strictly separates committed template files (.env-local) from git-ignored instance files containing actual secrets, preventing accidental credential exposure.
- [SAFE]: Application bootstrapping is organized into invokable booter classes, promoting single responsibility and clear separation of concerns for middleware, scheduling, and exception handling.
- [SAFE]: The recommendation to globally unguard models (Model::unguard) is presented as a deliberate architectural choice intended for use with validated Data Transfer Objects (DTOs) and Actions, rather than an attempt to bypass security controls.
- [SAFE]: Debugging tools and sensitive output (e.g., Spatie Ray logging) are appropriately gated by environment checks (e.g., $this->app->isLocal()) to ensure they are only active in development environments.
- [SAFE]: Middleware configurations, such as trustProxies('*') and CSRF exclusions for API routes, follow standard Laravel implementation patterns for applications operating behind load balancers or exposing public APIs.
Audit Metadata