laravel
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The instructions involve standard Laravel development commands such as
php artisan serve,php artisan sse:start, andcomposer install. These are used appropriately within the context of framework development and testing. - [EXTERNAL_DOWNLOADS]: The skill references the
youlai-laravelrepository and well-known PHP packages liketymon/jwt-authandgregwar/captcha. These are documented as necessary dependencies for the technical stack. - [CREDENTIALS_UNSAFE]: The documentation and Docker configuration examples include default/placeholder credentials (e.g.,
admin/123456). These are intended for local development environments and are clearly marked as default values. - [PROMPT_INJECTION]: The skill instructs the agent to generate application code (Controllers, Services, Models) based on user input. While this represents a surface for potential indirect prompt injection, the instructions enforce strict structural and naming conventions that help maintain code integrity.
Audit Metadata