php-pro
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard PHP development tools including
phpstan,phpunit, andpestfor static analysis and testing. This is the intended purpose of the skill and follows industry standard development workflows. - [PROMPT_INJECTION]: The instructions contain standard behavioral constraints (e.g., 'MUST DO', 'MUST NOT DO') which guide the agent toward producing high-quality, secure PHP code. No attempts to bypass safety filters or override system instructions were found.
- [CREDENTIALS_UNSAFE]: The skill explicitly instructs against hardcoding configuration and recommends using environment variables (
.env). Example code uses generic placeholders like 'password' and 'root' for database connections. - [DATA_EXFILTRATION]: No evidence of data exfiltration or unauthorized network operations. Reference material includes standard examples of making HTTP requests for building asynchronous applications.
- [EXTERNAL_DOWNLOADS]: The skill mentions common PHP ecosystem tools (Composer, PHPUnit, PHPStan, Swoole) which are well-known technology services. No suspicious remote code execution patterns or downloads from untrusted sources were detected.
Audit Metadata