bd-presenter
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a development guide for the better-data library, providing code examples and architectural rules for creating fluent builder methods.
- [DATA_EXFILTRATION]: The skill proactively addresses data exposure by requiring that any new method emitting values must honor the library's sensitiveFieldNames() redaction logic, protecting Secret and #[Sensitive] data.
- [COMMAND_EXECUTION]: Standard development tooling for PHP (phpunit, phpstan) is referenced for testing purposes, which is normal for this context.
- [INDIRECT_PROMPT_INJECTION]: The skill describes handling data from DataObjects.
- Ingestion points: DTO properties in Presenter.php.
- Boundary markers: sensitiveFieldNames() redaction list.
- Capability inventory: None (data transformation only).
- Sanitization: redactSensitive helper.
Audit Metadata