PHP Ecosystem

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a comprehensive educational resource for PHP development. It explicitly encourages security best practices, such as using prepared statements with PDO to prevent SQL injection and enabling strict types for code reliability.
  • [COMMAND_EXECUTION]: The skill defines tools for executing standard PHP development commands like composer, phpunit, and phpstan. These are used appropriately within the local development context for testing and dependency management.
  • [EXTERNAL_DOWNLOADS]: The documentation provides examples for including standard, well-known PHP libraries like Guzzle and Symfony components using the Composer package manager. These references target official industry-standard packages.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. Ingestion points: Project source files and composer.json via the Read tool. Boundary markers: No specific delimiters or safety warnings for embedded instructions are present in the guidelines. Capability inventory: Access to the Bash tool for command execution and the Edit tool for file modifications. Sanitization: No explicit sanitization or validation of the processed code content is defined. This surface is a inherent part of the skill's function as a coding assistant.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 12:34 AM
Security Audit — agent-trust-hub — PHP Ecosystem