php-modern

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides educational content and best practices for modern PHP development (versions 8.4-8.6). The content consists of syntactic examples, performance configurations, and migration workflows using standard tools like Rector and PHPStan. No patterns of prompt injection, data exfiltration, or obfuscation were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing and refactoring PHP code, which introduces a vulnerability surface if the processed data contains malicious instructions. Ingestion points include PHP source files in the /app and /tests directories as defined in reference materials. Boundary markers and explicit sanitization logic for user-provided code are not specified. The capability inventory includes the execution of static analysis and refactoring tools such as PHPStan, Rector, and Pest.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:36 PM