php-dayuse
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- CREDENTIALS_UNSAFE (SAFE): The skill explicitly forbids hardcoding configuration, secrets, or API keys in the code, requiring the use of
.envfiles and environment variables instead. - DATA_EXFILTRATION (SAFE): No unauthorized network operations or patterns involving the exfiltration of sensitive data were detected. Code examples for HTTP requests are standard library usages.
- COMMAND_EXECUTION (SAFE): The skill does not contain instructions to execute arbitrary shell commands or dangerous subprocesses.
- REMOTE_CODE_EXECUTION (SAFE): No patterns of downloading and executing remote scripts (e.g.,
curl | bash) were found. Referenced tools like Composer and PHPUnit are standard in the ecosystem. - PROMPT_INJECTION (SAFE): No attempts to override system instructions or bypass safety filters were detected. The constraints provided are intended to guide the agent toward high-quality, secure code production.
- DATA_EXPOSURE (SAFE): The skill mandates password hashing using secure algorithms (bcrypt/argon2) and explicitly forbids plain-text storage.
Audit Metadata