symfony
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard development guidelines for the Symfony framework. It correctly emphasizes security best practices including:
- [CREDENTIALS_UNSAFE]: Instructions for using
.envand.env.localfiles for secret management follow industry standards for development. - [COMMAND_EXECUTION]: The CLI commands listed (e.g.,
php bin/console) are standard Symfony tools used for routine development, migration, and maintenance tasks. - [INDIRECT_PROMPT_INJECTION]: The guide advocates for strong input validation via Data Transfer Objects (DTOs) and PHP attributes. It also highlights Twig's auto-escaping features to handle untrusted data securely.
- [DATA_EXFILTRATION]: No unauthorized network operations or exfiltration patterns were identified. All external references point to official documentation and well-known services (Symfony, Doctrine, API Platform).
- [SECURITY_BEST_PRACTICES]: The documentation includes dedicated sections on securing APIs with JWT, implementing Voters for granular authorization, and preventing SQL injection by using query parameters.
Audit Metadata