laravel-livewire

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building web components that ingest untrusted user data via property binding and action parameters.
  • Ingestion points: User input is received through public properties bound with wire:model and parameters passed to component actions as described in SKILL.md.
  • Boundary markers: The skill instructions emphasize the use of the #[Validate] attribute and the $this->validate() method to define constraints on user input.
  • Capability inventory: The code examples in SKILL.md demonstrate the ability to perform database writes (Post::create) and file system operations ($this->photo->store).
  • Sanitization: The documentation explicitly instructs the agent to validate all input and treat public properties as untrusted user data.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the Livewire framework during the setup process.
  • Fetches the livewire/livewire package from the official PHP package registry (Packagist) via composer require commands documented in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:46 AM