The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references the installation of official Symfony UX packages (symfony/ux-twig-component, symfony/ux-live-component) via the Composer package manager. These are well-known and trusted components of the Symfony framework ecosystem.
[COMMAND_EXECUTION]: The skill provides instructions for using standard development validation tools, including composer validate, phpstan, and ripgrep (rg). These commands are used for legitimate code analysis and project maintenance.
[INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface through its use of Read, Glob, and Grep tools to process project files. Although this creates a theoretical path for indirect prompt injection from codebase content, the agent's capabilities are strictly limited to reading and searching, mitigating the risk of exploitation. Evidence: Ingestion points: project files via Read/Glob/Grep; Boundary markers: not specified; Capability inventory: Read, Glob, Grep (no write/execute tools); Sanitization: not specified.
[SAFE]: Extensive scanning for obfuscation, hardcoded credentials, unauthorized network activity, and privilege escalation patterns returned no findings. The skill's behavior is consistent with its stated purpose of assisting with Symfony UI architecture.

twig-components