write-script-php
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the
wmillCLI tool (e.g.,wmill script preview,wmill sync push). These commands are part of the intended development workflow for the Windmill platform and allow the agent to iterate on, test, and deploy code. - [REMOTE_CODE_EXECUTION]: The
wmill script previewcommand executes local PHP script code. The skill directs the agent to execute this command when the user requests a test or run of their local edits. While this involves code execution, it is a core feature of the development environment provided by the vendor, Windmill Labs. - [CREDENTIALS_SAFE]: The skill outlines a standard practice for handling sensitive configuration (like database credentials) using 'Resource Types'. It instructs the agent to define these structures and pass them as parameters to the script's
mainfunction, which is a secure alternative to hardcoding secrets.
Audit Metadata