joomla-custom-fields
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code examples for Joomla 5/6 development. The content is educational and professional in nature.
- [COMMAND_EXECUTION]: Code examples use the official Joomla Database API (
JDatabase) to perform legitimate CRUD operations on field tables (#__fields,#__fields_values). All queries are correctly escaped using$db->quote()and$db->quoteName()to prevent SQL injection. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates rendering user-generated content from custom fields. It explicitly recommends best practices such as utilizing Joomla's built-in filters (e.g.,
SAFEHTML,NOHTML) and applyinghtmlspecialchars()to output, which are appropriate mitigations for handling potentially untrusted data.
Audit Metadata