ai-sdk-development
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The content is purely educational and technical, documenting the unified API provided by the Laravel AI SDK for various AI tasks.
- [EXTERNAL_DOWNLOADS]: Refers to the official Laravel AI package (laravel/ai) via Composer, which is a trusted and well-known source within the PHP ecosystem.
- [COMMAND_EXECUTION]: Documents standard Laravel Artisan commands for code generation, which is a legitimate part of the developer workflow.
- [DATA_EXFILTRATION]: No unauthorized data access or transmission patterns were found; network-related tools like WebSearch are documented for their intended use in AI agents.
- [PROMPT_INJECTION]: No attempts to manipulate agent behavior or bypass system safety filters were detected.
- [PROMPT_INJECTION]: The documentation identifies potential data ingestion points like WebFetch and WebSearch tools in SKILL.md. While these represent a surface for indirect prompt injection in user-built agents, no actual injection content is present. Ingestion points: WebFetch, WebSearch, FileSearch. Boundary markers: None specified. Capability inventory: File operations, vector store management, and media synthesis. Sanitization: Not addressed in the reference material.
Audit Metadata