craft-php-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is a collection of coding standards and best practices for Craft CMS development.
- [COMMAND_EXECUTION]: The skill contains instructions for using standard development tools like Composer, DDEV, and Craft CMS generators (e.g.,
ddev craft make). These are legitimate development workflows intended for the user's local environment. - [DATA_EXPOSURE]: The guidelines promote secure handling of environment variables through
App::env()andApp::parseEnv(), and suggest checking.envfiles for configuration. These instructions align with security best practices for secret management in Craft CMS. - [EXTERNAL_DOWNLOADS]: The skill references official Craft CMS documentation and standard repositories. These are well-known and trusted sources in the context of Craft CMS development.
Audit Metadata