php-structured-edit
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a wrapper script
scripts/php-ast-editto invoke a PHP AST manipulation tool. The script searches for the executable in the repository'sbindirectory, thevendor/bindirectory, an adjacent PHAR file, or the system path. While this involves local command execution, it is the primary intended purpose of the skill for performing safe code transformations. - [NO_CODE]: The logic for AST manipulation is not contained within the skill itself but depends on an external
php-ast-edittool being present in the environment or installed via Composer. The skill acts as an interface layer for an existing developer tool.
Audit Metadata