php-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from the open web, creating a vulnerability to indirect prompt injection attacks.
- Ingestion points: Instructions in
SKILL.mddirect the agent to useWebSearchandWebFetchto retrieve live examples and framework-specific documentation (e.g., from Adobe's developer site or general search results). - Boundary markers: Absent. There are no instructions provided to the agent to treat external content as data only or to ignore potential instructions embedded within the fetched documents.
- Capability inventory: The skill allows access to powerful tools including
Bash,Write,Edit, andGlobacross the local environment. - Sanitization: Absent. The skill does not define any validation or filtering mechanisms for the content retrieved from the web before it enters the agent's context.
Audit Metadata