specialist-engineering-laravel-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains a standard surface for indirect prompt injection via the interpolation of user-supplied data into the subagent's instructions. 1. Ingestion points: User input enters the system through the
{the user's question}placeholder in the subagent prompt defined inSKILL.md. 2. Boundary markers: There are no explicit delimiters (e.g., XML tags or triple backticks) surrounding the interpolated user input to distinguish it from system instructions. 3. Capability inventory: The subagent's capabilities are restricted to providing technical framework guidance and generating Laravel-compliant code. 4. Sanitization: No specific sanitization or filtering logic is described for the user-provided text. - [SAFE]: The skill follows security best practices for the Laravel framework, specifically advising users to validate input using form requests and to avoid the use of sensitive environmental helpers outside of configuration files. No evidence of data exfiltration, hardcoded credentials, or unauthorized command execution was detected.
Audit Metadata