php-modern
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and best practices for modern PHP development (versions 8.4-8.6). The content consists of syntactic examples, performance configurations, and migration workflows using standard tools like Rector and PHPStan. No patterns of prompt injection, data exfiltration, or obfuscation were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing and refactoring PHP code, which introduces a vulnerability surface if the processed data contains malicious instructions. Ingestion points include PHP source files in the /app and /tests directories as defined in reference materials. Boundary markers and explicit sanitization logic for user-provided code are not specified. The capability inventory includes the execution of static analysis and refactoring tools such as PHPStan, Rector, and Pest.
Audit Metadata