bd-hydration-coercion
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill establishes robust coding standards for data hydration, prioritizing strict type enforcement and explicit error handling to prevent logical errors and silent data corruption in PHP applications.
- [SAFE]: All referenced tools, such as PHPUnit and PHPStan, and external links to the better-data GitHub repository are legitimate resources belonging to the verified author.
- [INDIRECT_PROMPT_INJECTION]: The skill defines the architecture for transforming external data into typed objects, a known vulnerability surface.
- Ingestion points: Data processed through DataObject::fromArray and the hydration layer from external sources.
- Boundary markers: Strict requirement to throw TypeCoercionException on any unexpected or invalid input, creating a defensive boundary.
- Capability inventory: The logic is limited to type-safe conversions and attribute-based transformations without introducing dangerous side effects or command execution.
- Sanitization: Enforces strict sanitization through type-specific helpers like toInt and toString, ensuring data conforms to the expected schema before use.
Audit Metadata