perfex-security

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a security-focused knowledge base, providing code snippets that demonstrate best practices for Perfex CRM development. It covers mitigation for common vulnerabilities such as Time-of-Check to Time-of-Use (TOCTOU) races in token consumption and open redirect vulnerabilities.
  • [SAFE]: The skill explicitly warns against insecure practices like using unserialize() on user-controlled data and logging Personally Identifiable Information (PII), providing safe alternatives like json_decode() and CodeIgniter's built-in logging threshold mechanisms.
  • [SAFE]: All external references point to official and trusted documentation sources, including the Perfex CRM help desk, OWASP, and the official CodeIgniter 3 user guide. These references are documented neutrally as sources of security guidance.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 10:30 PM