php-pro

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs the agent to use standard security practices, including Argon2id for password hashing and validating user input with typed requests.
  • [SAFE]: Command execution references (e.g., vendor/bin/phpstan, vendor/bin/phpunit) are restricted to local development tools commonly used for quality assurance in PHP projects.
  • [SAFE]: No hardcoded sensitive credentials were found; examples use standard placeholders like 'root' and 'password' for local database connections.
  • [SAFE]: External URL references in the documentation point to dummy example domains (e.g., api.example.com) or represent standard HTTP request patterns for educational purposes.
  • [SAFE]: The skill does not contain any obfuscated code, hidden instructions, or dynamic context injection patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 09:32 AM
Security Audit — agent-trust-hub — php-pro