laravel-specialist
Fail
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSMETADATA_POISONINGCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation link
https://jeffallan.github.io/claude-skills/skills/backend/laravel-specialist/included in the skill's metadata and footer has been flagged as malicious by automated security scanners (URLite). Navigating to this site may expose the user to phishing or malicious content. - [METADATA_POISONING]: There is a discrepancy between the author identified by the platform ('midudev') and the author specified in the skill's YAML frontmatter and knowledge reference ('Jeffallan' of 'Synergetic Solutions'). This misattribution and potential impersonation is a security concern.
- [COMMAND_EXECUTION]: The skill workflow involves executing several shell commands, including
php artisan migrate:status,php artisan route:list,php artisan test, and./vendor/bin/pint. While common for Laravel development, these commands should only be executed if the source is fully trusted.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata