← Back to Skills Marketplace
ivangdavila

Laravel

by Iván · GitHub ↗ · v1.0.1
linuxdarwinwin32 ✓ Security Clean
1338
Downloads
4
Stars
3
Active Installs
2
Versions
Install in OpenClaw
/install laravel
Description
Avoid common Laravel mistakes — N+1 queries, mass assignment, cache gotchas, and queue serialization traps.
README (SKILL.md)

Quick Reference

Topic File
N+1 queries, eager loading, accessors, observers eloquent.md
Validation, middleware order, dependency injection controllers.md
Job serialization, retries, failed jobs queues.md
Guards, policies, gates, Sanctum tokens auth.md
XSS escaping, components, slots blade.md
Commands, scheduling, tinker artisan.md

Critical Rules

  • Eager load relationships — with('posts') not lazy ->posts in loop (N+1)
  • preventLazyLoading() in dev AppServiceProvider — crashes on N+1, catches early
  • env() only in config files — returns null after config:cache
  • $fillable whitelist fields — $guarded = [] allows mass assignment attacks
  • find() returns null — use findOrFail() to avoid null checks
  • Job properties serialize models as ID — re-fetched on process, may be stale/deleted
  • route:cache requires controller routes — closures break cached routes
  • DB::transaction() doesn't catch exit/timeout — only exceptions roll back
  • RefreshDatabase uses transactions — faster than DatabaseMigrations
  • {!! $html !!} skips escaping — XSS vector, use {{ }} by default
  • Middleware order matters — earlier middleware wraps later execution
  • required validation passes empty string — use required|filled for content
  • firstOrCreate persists immediately — firstOrNew returns unsaved model
  • Route model binding uses id — override getRouteKeyName() for slug
Usage Guidance
This skill is documentation-only and coherent with its stated purpose. It does not request credentials or install code. Before installing: (1) confirm you trust the publisher (source/homepage not provided), (2) ensure php and composer are available if you want to follow its advice locally, and (3) exercise normal caution if you let an agent act on its recommendations — never paste secrets into chat or run suggested CLI commands without reviewing them first.
Capability Analysis
Type: OpenClaw Skill Name: laravel Version: 1.0.1 The skill bundle contains metadata and documentation files (`.md`) detailing common pitfalls and best practices in Laravel development. The `SKILL.md` and other markdown files provide educational content on how to avoid vulnerabilities like N+1 queries, mass assignment, and XSS, rather than exploiting or instructing the agent to perform malicious actions. There is no executable code, no instructions for data exfiltration, persistence, or any form of prompt injection against the agent with harmful intent. The content is purely informational and aligned with the stated purpose of helping to build robust Laravel applications.
Capability Assessment
Purpose & Capability
Name/description (Laravel Eloquent, queues, auth, blade, artisan advice) align with the declared requirements (php and composer). Requiring PHP tooling is proportionate for a Laravel guidance skill.
Instruction Scope
SKILL.md and the included .md files are documentation and checklists. They do reference Artisan commands and Laravel behaviors as warnings, but do not instruct the agent to read unrelated files, exfiltrate data, or call external endpoints. There are no instructions that access environment variables, credentials, or system paths beyond expected Laravel discussion (e.g., note about env() usage).
Install Mechanism
No install spec and no code files — the skill is instruction-only which minimizes disk or network risk.
Credentials
The skill requests no environment variables, credentials, or config paths. The few mentions of env() in the docs are guidance about Laravel behavior, not a request to read secrets.
Persistence & Privilege
always is false and the skill does not request persistent presence or modify other skills or system settings. User-invocable/autonomous invocation are defaults and acceptable here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install laravel
  3. After installation, invoke the skill by name or use /laravel
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Initial release
v1.0.0
Initial release
Metadata
Slug laravel
Version 1.0.1
License
All-time Installs 3
Active Installs 3
Total Versions 2
Frequently Asked Questions

What is Laravel?

Avoid common Laravel mistakes — N+1 queries, mass assignment, cache gotchas, and queue serialization traps. It is an AI Agent Skill for Claude Code / OpenClaw, with 1338 downloads so far.

How do I install Laravel?

Run "/install laravel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Laravel free?

Yes, Laravel is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Laravel support?

Laravel is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).

Who created Laravel?

It is built and maintained by Iván (@ivangdavila); the current version is v1.0.1.

💬 Comments