The Agent Skills Directory

[SAFE]: The skill provides comprehensive instructions on PHPUnit testing best practices. Analysis of all 47 files revealed no signs of malicious intent, prompt injection, or data exfiltration. The code examples provided are standard for PHPUnit 11+ and PHP 8.x development.
[COMMAND_EXECUTION]: The documentation references standard CLI tools including phpunit, PHP-CS-Fixer, and PHP_CodeSniffer. These tools are commonly used for running tests and enforcing coding standards in PHP projects.
[EXTERNAL_DOWNLOADS]: The skill refers to established open-source packages such as phpspec/prophecy-phpunit and dama/doctrine-test-bundle. These are industry-standard dependencies for enhancing PHPUnit's functionality and do not constitute a supply chain risk in this context.
[INDIRECT_PROMPT_INJECTION]: The skill guides an agent on how to process and generate code for testing, which creates a potential surface for indirect prompt injection from the source code being analyzed.
Ingestion points: Local source code files and existing PHPUnit test classes.
Boundary markers: The skill advocates for the use of PHP 8 attributes like #[Test] and #[CoversClass] to provide structure and metadata for the tests.
Capability inventory: Reading source files, generating new test files, and executing shell commands for test running.
Sanitization: As an instructional skill, it does not implement specific sanitization routines for the code it processes, relying instead on the agent's internal safety guardrails.

phpunit-best-practices