php-structured-edit
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash wrapper script (
scripts/php-ast-edit) to invoke a local transformation utility. The script safely resolves the location of the binary by searching standard project paths (e.g., Composer's vendor directory) or the system PATH, ensuring execution is confined to trusted local binaries. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for modifying source code based on instruction-driven snippets.
- Ingestion points: PHP source files and the JSON-structured edit instructions.
- Boundary markers: The tool uses a formal operation schema and requires a SHA-256 hash of the target file to ensure edits are applied to the correct version.
- Capability inventory: The skill has the capability to write modifications to PHP files on the local filesystem.
- Sanitization: The tool performs automatic syntax validation on all generated output, rejecting any transaction that would result in invalid PHP code, which mitigates the risk of injecting broken or overtly malicious syntax structures.
Audit Metadata