symfony-notifier
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for the official Symfony Notifier component. All code examples and installation instructions align with standard software development practices for the PHP ecosystem.- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Symfony packages via Composer (e.g.,
symfony/notifier,symfony/slack-notifier). These are well-known, trusted libraries from the Symfony project.- [CREDENTIALS_UNSAFE]: While the skill includes Data Source Name (DSN) strings for configuration, it uses clear placeholders such asSIDandTOKEN. Additionally, it explicitly instructs users to configure these sensitive values in.envfiles, which is the industry-standard best practice for credential management in Symfony applications.- [INDIRECT_PROMPT_INJECTION]: The skill describes tools for sending messages to external platforms (Slack, Discord, Twilio). While these platforms represent an external data sink, the skill itself does not process untrusted external input in a way that introduces injection vulnerabilities; it provides the infrastructure for developers to implement messaging logic.
Audit Metadata