craft-twig-guidelines
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a set of developer guidelines for Twig templating in Craft CMS. It promotes several security and maintenance best practices, including:
- Recommending
cpUrl()or environment variables over hardcoded administrative paths. - Warning users to only use the
htmlkey in thetag()helper for trusted input to prevent Cross-Site Scripting (XSS). - Encouraging template isolation using the
onlykeyword inincludetags to prevent unintended variable leakage (ambient variable pollution). - Suggesting standard, well-known plugins from the Craft CMS ecosystem for extended functionality.
- Promoting the use of environment-aware helpers and avoiding the exposure of configuration details.
Audit Metadata