nk-laravel-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based architectural guidelines and coding standards. No malicious code, credential exposure, obfuscation, or persistence mechanisms were detected. The guidelines follow standard software development practices for the Laravel framework.
- [INDIRECT_PROMPT_INJECTION]: The skill acts on Laravel source code provided by the user, which represents a processing surface for untrusted data. While the skill itself is passive and informational, it lacks explicit boundary markers for the data it processes.
- Ingestion points: User-supplied Laravel source code, migrations, and Blade templates.
- Boundary markers: None identified; the skill assumes standard agent-user interaction context.
- Capability inventory: No dangerous capabilities such as file system writes, network requests, or subprocess execution are requested or utilized by this skill.
- Sanitization: No specific sanitization or filtering logic is provided for external code content.
Audit Metadata