{"agent":"claude","input":"Audit this Symfony app for security problems and write security-audit.md. Read composer.json, .env, config/packages/security.yaml, framework.yaml, csrf.yaml and html_sanitizer.yaml, every controller under src/Controller, src/Security/PostVoter.php, src/Repository/PostRepository.php and the templates under templates/blog first. Run composer install, then the app on localhost with the SQLite database from .env. Run composer audit. Run bin/console debug:router and check every route against its IsGranted attributes and voter. Test anonymous and non-author access to the admin routes, comment and login submissions without CSRF tokens, and markup in comment content through the sanitizer. For each finding give the file and line, one request that shows it against the running app, its severity and the fix. Note what was checked and found sound. Do not paste secrets. Change no code.","resources":[{"url":"https://github.com/your-org/your-app"}]}