laravel-quality
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing various PHP packages via Composer, including standard development tools like PHPStan, Larastan, Laravel Pint, and Pest. It also lists several reputable community packages from Spatie and the Laravel core team. These are well-known, trusted dependencies within the ecosystem.
- [COMMAND_EXECUTION]: The instructions include commands for running development binaries located in the project's
vendor/bin/directory, such asphpstan,pint, andpest. It also includes adevscript utilizingnpx concurrentlyto manage local development processes like the built-in PHP server and queue listeners. - [INDIRECT_PROMPT_INJECTION]: The skill provides structural templates for architecture tests and CI/CD workflows. While providing such templates theoretically increases the attack surface for indirect prompt injection if the resulting systems process untrusted data, the provided examples are standard configuration patterns and do not introduce specific vulnerabilities.
Audit Metadata