@psalm-flow

The @psalm-flow tag is part of Psalm's taint-analysis annotations, used to describe how tainted data flows through a function's parameters and return value.

The <FlowType> is a keyword — one of TaintSource, TaintSink, TaintSpecialize or TaintUnescape — captured into a FlowType enum.

Parsing a @psalm-flow tag produces a PsalmFlowTag instance, carrying the parsed $flow and optional $variable alongside the $name every Tag already provides.

See Psalm's security analysis annotations.