symfony-notifier

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for the official Symfony Notifier component. All code examples and installation instructions align with standard software development practices for the PHP ecosystem.- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Symfony packages via Composer (e.g., symfony/notifier, symfony/slack-notifier). These are well-known, trusted libraries from the Symfony project.- [CREDENTIALS_UNSAFE]: While the skill includes Data Source Name (DSN) strings for configuration, it uses clear placeholders such as SID and TOKEN. Additionally, it explicitly instructs users to configure these sensitive values in .env files, which is the industry-standard best practice for credential management in Symfony applications.- [INDIRECT_PROMPT_INJECTION]: The skill describes tools for sending messages to external platforms (Slack, Discord, Twilio). While these platforms represent an external data sink, the skill itself does not process untrusted external input in a way that introduces injection vulnerabilities; it provides the infrastructure for developers to implement messaging logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 09:22 PM