laravel

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The instructions involve standard Laravel development commands such as php artisan serve, php artisan sse:start, and composer install. These are used appropriately within the context of framework development and testing.
  • [EXTERNAL_DOWNLOADS]: The skill references the youlai-laravel repository and well-known PHP packages like tymon/jwt-auth and gregwar/captcha. These are documented as necessary dependencies for the technical stack.
  • [CREDENTIALS_UNSAFE]: The documentation and Docker configuration examples include default/placeholder credentials (e.g., admin/123456). These are intended for local development environments and are clearly marked as default values.
  • [PROMPT_INJECTION]: The skill instructs the agent to generate application code (Controllers, Services, Models) based on user input. While this represents a surface for potential indirect prompt injection, the instructions enforce strict structural and naming conventions that help maintain code integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 01:54 AM
Security Audit — agent-trust-hub — laravel