The Agent Skills Directory

[SAFE]: The skill consists entirely of Markdown-based documentation and technical references. It provides guidance on code refactoring patterns, modern PHP syntax, and the use of Rector, a well-known and legitimate tool for automated PHP upgrades.- [COMMAND_EXECUTION]: The skill references the execution of vendor/bin/rector, which is the standard and expected way to run the Rector tool in a PHP development environment. These references are purely instructional and do not involve malicious command injection.- [EXTERNAL_DOWNLOADS]: The skill's documentation for CI/CD integration (GitHub Actions) correctly references official and trusted actions, specifically actions/checkout and shivammathur/setup-php. These are standard tools for PHP workflows.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided PHP code. While this presents an ingestion surface for external data, the skill does not possess any dangerous capabilities (such as automated network operations or file writes) that could be exploited via malicious code in the analyzed files. The instructions are focused on providing analysis and refactoring suggestions back to the user.

php-best-practices