laravel-quality

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing various PHP packages via Composer, including standard development tools like PHPStan, Larastan, Laravel Pint, and Pest. It also lists several reputable community packages from Spatie and the Laravel core team. These are well-known, trusted dependencies within the ecosystem.
  • [COMMAND_EXECUTION]: The instructions include commands for running development binaries located in the project's vendor/bin/ directory, such as phpstan, pint, and pest. It also includes a dev script utilizing npx concurrently to manage local development processes like the built-in PHP server and queue listeners.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides structural templates for architecture tests and CI/CD workflows. While providing such templates theoretically increases the attack surface for indirect prompt injection if the resulting systems process untrusted data, the provided examples are standard configuration patterns and do not introduce specific vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:58 PM