technical-debt-manager-php-laravel
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bashto execute several standard repository-level commands, includinggit logfor churn analysis andphp artisanfor framework interaction. It also runs tests (php artisan test) and static analysis tools (phpstan,pint) located within the project's own directory. - [EXTERNAL_DOWNLOADS]: The skill performs
composer installandcomposer audit, which connect to the official PHP package registry (Packagist). These are well-known and trusted services used for dependency management and security auditing. - [PROMPT_INJECTION]: The skill is designed to ingest and process external data from the target repository using
ReadandGrep. While this creates a surface for indirect prompt injection, the risk is inherent to the nature of a code analysis tool and is mitigated by the agent's internal safety protocols and the limited scope of the analysis tasks.
Audit Metadata