br-atomic-idempotency
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill describes a storage mechanism that serializes HTTP responses. It explicitly documents the use of
allowed_classes => falseduring deserialization, which is a standard security best practice in PHP to prevent object injection vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The middleware processes untrusted external data, specifically the
Idempotency-Keyheader and request parameters, to prevent concurrent duplicate execution. The skill includes built-in mitigations such as key length validation and printable character checks to ensure input integrity. - [SAFE]: The implementation guidance follows the principle of least privilege by recommending that authentication middleware (
bearerAuth) be executed before the idempotency middleware. This prevents unauthenticated clients from consuming server resources or creating idempotency leases. - [SAFE]: All referenced code components and namespaces (e.g.,
BetterRoute\*) are consistent with the vendor's own libraries and established WordPress development patterns.
Audit Metadata