perfex-security
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused knowledge base, providing code snippets that demonstrate best practices for Perfex CRM development. It covers mitigation for common vulnerabilities such as Time-of-Check to Time-of-Use (TOCTOU) races in token consumption and open redirect vulnerabilities.
- [SAFE]: The skill explicitly warns against insecure practices like using
unserialize()on user-controlled data and logging Personally Identifiable Information (PII), providing safe alternatives likejson_decode()and CodeIgniter's built-in logging threshold mechanisms. - [SAFE]: All external references point to official and trusted documentation sources, including the Perfex CRM help desk, OWASP, and the official CodeIgniter 3 user guide. These references are documented neutrally as sources of security guidance.
Audit Metadata