livewire-development
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by design, as it requires the agent to ingest and act upon content from potentially untrusted project files.\n
- Ingestion points: The agent is directed to read
composer.json,composer.lock, PHP component classes, Blade templates, and project configuration files (SKILL.md).\n - Boundary markers: The instructions do not include specific delimiters or warnings to distinguish between the skill's instructions and instructions that might be embedded in the code files being analyzed.\n
- Capability inventory: The agent uses
composerandphp artisanCLI tools and has the ability to create or modify component and route files (SKILL.md,references/livewire-4.md).\n - Sanitization: There are no explicit instructions to sanitize or validate the content of the project files before processing.\n- [SAFE]: The skill explicitly promotes security best practices, such as treating all public properties as untrusted input, requiring authorization checks on every mutating action, and avoiding the storage of secrets in component state (
SKILL.md,references/testing-and-security.md).\n- [SAFE]: All external references point to official Laravel Livewire documentation (livewire.laravel.com), which is a well-known and trusted source for this technology.
Audit Metadata