php-pro

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run standard PHP development tools including phpstan, phpunit, and pest for static analysis and testing. This is the intended purpose of the skill and follows industry standard development workflows.
  • [PROMPT_INJECTION]: The instructions contain standard behavioral constraints (e.g., 'MUST DO', 'MUST NOT DO') which guide the agent toward producing high-quality, secure PHP code. No attempts to bypass safety filters or override system instructions were found.
  • [CREDENTIALS_UNSAFE]: The skill explicitly instructs against hardcoding configuration and recommends using environment variables (.env). Example code uses generic placeholders like 'password' and 'root' for database connections.
  • [DATA_EXFILTRATION]: No evidence of data exfiltration or unauthorized network operations. Reference material includes standard examples of making HTTP requests for building asynchronous applications.
  • [EXTERNAL_DOWNLOADS]: The skill mentions common PHP ecosystem tools (Composer, PHPUnit, PHPStan, Swoole) which are well-known technology services. No suspicious remote code execution patterns or downloads from untrusted sources were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:31 AM
Security Audit — agent-trust-hub — php-pro