laravel-plugin-discovery
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill. The instructions and tool definitions are consistent with the stated purpose of Laravel package discovery.
- [SAFE]: The connection to the external MCP server (https://laraplugins.io/mcp/plugins) is a legitimate requirement for the skill's functionality and does not involve the transfer of sensitive local data or credentials.
- [SAFE]: The skill does not request or require any administrative privileges, shell execution, or access to sensitive file paths.
- [SAFE]: While the skill processes external package data including README content (indirect prompt injection surface), it lacks the dangerous capabilities (such as file writing or arbitrary command execution) necessary to facilitate a high-risk exploit.
Audit Metadata