The Agent Skills Directory

[COMMAND_EXECUTION]: The skill mentions the use of composer require for installation and suggests prefixing commands with ddev if configuration is detected. These are standard development practices for PHP environments.
[EXTERNAL_DOWNLOADS]: Refers to official documentation at https://symfony.com/doc/7.4/components/filesystem.html. This is a well-known and trusted source for PHP development.
[DATA_EXFILTRATION]: The skill documents capabilities for creating, copying, moving, and deleting files (mkdir, copy, dumpFile, remove, mirror). While these provide filesystem access, they are the primary intended purpose of the skill and no unauthorized data transmission patterns were detected.
[PROMPT_INJECTION]: The skill contains potential surface area for indirect prompt injection as it processes file paths and content from variable inputs (e.g., in dumpFile and Path::join).
Ingestion points: SKILL.md (path parameters and content variables in PHP examples).
Boundary markers: Not explicitly defined in the provided code snippets.
Capability inventory: File write (dumpFile), directory creation (mkdir), file deletion (remove), and directory mirroring (mirror).
Sanitization: Employs Path::join and Path::canonicalize from the Symfony library, which provide standard path normalization and security against basic path traversal.

symfony-filesystem