blatui-laravel-blade-components
Warn
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
anousss007/blatuipackage via Composer from a third-party source. - Evidence:
composer require anousss007/blatuiin the installation section. - [COMMAND_EXECUTION]: The skill executes multiple shell commands, including
php artisancommands that trigger logic from the newly installed third-party package. - Evidence:
php artisan blatui:init,php artisan blatui:add, andphp artisan vendor:publish --tag=blatui-foundations. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes the project environment and automatically writes files to the project directory, which creates a vulnerability surface if the agent processes untrusted project files.
- Ingestion points:
blatui:initscans project packages, CSS, and JS configurations (SKILL.md). - Boundary markers: None present; the skill assumes the project environment is trustworthy.
- Capability inventory: Writing Blade files to
resources/views/components/ui/, modifyingresources/css/app.cssandresources/js/app.js(SKILL.md). - Sanitization: No mention of validation or escaping for project-specific configurations before generating component code.
Audit Metadata