php
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines modern PHP development standards and provides detailed references for the type system, OOP patterns, concurrency, and packaging. It encourages the use of modern PHP features such as union/intersection types, readonly classes, and property hooks.
- [SAFE]: It leverages Language Server Protocol (LSP) tools for project navigation (e.g., goToDefinition, findReferences). This is a secure practice as it relies on structured, scope-aware analysis of the codebase rather than generic text searching.
- [SAFE]: External references point to official and trusted domains such as php.net, php-fig.org, and getcomposer.org. Similarly, recommended concurrency libraries (Revolt, AMPHP, ReactPHP) are well-known and established in the PHP ecosystem.
- [INDIRECT_PROMPT_INJECTION]: As a code analysis and writing skill, it inherently processes untrusted PHP source code. While this presents a surface for indirect prompt injection, the risk is mitigated by the skill's focus on strict type enforcement and the use of read-only LSP tools for navigation. Given this is the primary purpose of the skill, the associated risk is considered negligible.
Audit Metadata