symfony-process
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes how to run external processes using the
symfony/processcomponent. - It provides examples for executing common tools like
git,ffmpeg,rsync, andnpm. - It includes proactive security guidance, explicitly warning against the use of
fromShellCommandlinedue to shell injection risks and recommending the safer array-based constructor as the primary pattern. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
symfony/processlibrary via Composer. - Symfony is a widely recognized and trusted open-source framework in the PHP ecosystem.
- [PROMPT_INJECTION]: While the skill demonstrates processing user-provided paths and input in shell commands (a potential indirect injection surface), it provides direct remediation by instructing the agent to use the library's built-in argument escaping mechanism (the array form).
Audit Metadata