The Agent Skills Directory

Data Exposure (SAFE): The guides describe preserving rawData in DTOs. This is a standard practice for auditing and debugging external API integrations (Stripe, PayPal) and does not represent a security flaw.
Remote Code Execution (SAFE): All code snippets use standard Laravel/PHP functions (data_get, match, Factory::guessFactoryNamesUsing). There are no calls to eval(), exec(), or unsafe deserialization.
Indirect Prompt Injection (SAFE): While the pattern involves processing untrusted external data, the transformers perform explicit type mapping and do not interpolate data into LLM prompts within the scope of these files.

laravel-dtos