PHP Ecosystem
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a comprehensive educational resource for PHP development. It explicitly encourages security best practices, such as using prepared statements with PDO to prevent SQL injection and enabling strict types for code reliability.
- [COMMAND_EXECUTION]: The skill defines tools for executing standard PHP development commands like
composer,phpunit, andphpstan. These are used appropriately within the local development context for testing and dependency management. - [EXTERNAL_DOWNLOADS]: The documentation provides examples for including standard, well-known PHP libraries like Guzzle and Symfony components using the Composer package manager. These references target official industry-standard packages.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. Ingestion points: Project source files and composer.json via the
Readtool. Boundary markers: No specific delimiters or safety warnings for embedded instructions are present in the guidelines. Capability inventory: Access to theBashtool for command execution and theEdittool for file modifications. Sanitization: No explicit sanitization or validation of the processed code content is defined. This surface is a inherent part of the skill's function as a coding assistant.
Audit Metadata