nk-livewire-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses
config/resources.phpas a primary source for component definitions, creating an ingestion point for external data that influences agent actions.\n - Ingestion points: The agent is instructed to read and prioritize definitions from
config/resources.php(referenced inSKILL.mdandrules/resource-config.md).\n - Boundary markers: No delimiters or instructions to ignore embedded instructions are provided; the agent is explicitly told to 'implement exactly as written'.\n
- Capability inventory: The skill has the agent generate PHP code for Livewire components and form objects, and modify application route files.\n
- Sanitization: There are no instructions to validate or sanitize the data from the configuration file before using it for code generation.\n- [COMMAND_EXECUTION]: The instructions direct the agent to execute the
php artisan livewire:formcommand to scaffold new form object files.
Audit Metadata