php-logging-exceptions
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents defensive programming practices for PHP, such as input encoding and validation at system boundaries.
- [SAFE]: The instructions explicitly prohibit the logging of sensitive information including plaintext passwords, session IDs, CSRF tokens, and PII (email addresses, IP addresses), which reduces the risk of credential exposure and data leaks.
- [SAFE]: The guidelines encourage encoding dynamic values before logging, which is a standard mitigation against log injection attacks.
- [SAFE]: The skill includes instructions to rate-limit or aggregate security events to prevent log exhaustion and denial-of-service (DoS) scenarios.
Audit Metadata