laravel-nuxt
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains legitimate architectural guidance and code snippets for integrating Laravel with Nuxt.js. It correctly implements security best practices, including Sanctum SPA authentication, CSRF protection, and model-level authorization checks.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing external HTTP request data, which represents a standard attack surface for web applications.
- Ingestion points:
PostController.phphandles user-provided inputs via$request->searchand$request->category. - Boundary markers: None explicitly defined in the provided code templates.
- Capability inventory: The skill is allowed to use shell commands via the
Bashtool as defined in the frontmatter. - Sanitization: The templates use Laravel's Eloquent ORM, which provides automatic parameter binding to protect against SQL injection.
Audit Metadata