php-frontend-audit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is a defensive security reference focused on identifying and mitigating common PHP frontend vulnerabilities such as XSS, CSRF, and Open Redirects. It provides educational value and guidance for security practitioners.
- [NO_CODE]: The skill consists entirely of markdown documentation and reference patterns. No executable scripts, binaries, or automated configuration files are present in the provided files.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a structured evidence format (
[EVID_...]) for reporting findings. While the agent will process external PHP source code as part of its audit task, the skill provides specific guidance on identifying unsafe data flows and sinks, which helps the agent distinguish between data and malicious instructions.
Audit Metadata