phpstan-developer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and code templates for building PHPStan rules and extensions. All code examples use standard PHPStan and PHP-Parser APIs.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve analyzing and processing PHP source code. While this represents a data ingestion surface common to developer tools, no malicious patterns or instruction-override attempts were identified. The capabilities are limited to assisting the user with PHPStan rule development.
- [DYNAMIC_EXECUTION]: The documentation mentions the experimental
fixNode()API, which uses callbacks for AST transformations. This is a legitimate feature of PHPStan used for automated code fixes and does not involve executing untrusted strings or external commands.
Audit Metadata