ddev-ops
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
audit-ddev-config.pyscript programmatically invokes thegitbinary to audit the project's configuration. It includes specific security mitigations, such as enforcing absolute paths for binaries to prevent local stub execution and disablingcore.fsmonitorto prevent unauthorized execution of repository-supplied commands. - [COMMAND_EXECUTION]: The
run-python.shscript is used to bootstrap the execution of Python tools by locating a valid local interpreter. - [EXTERNAL_DOWNLOADS]: The
check-ddev-facts.pyscript retrieves DDEV release data and software end-of-life information from official GitHub repositories and the well-known endoflife.date service. These network requests are transparently documented and used solely for maintaining the accuracy of the skill's data. - [SAFE]: The skill provides security-focused guidance, specifically warning users against common pitfalls like forwarding host SSH agents into containers or committing production credentials to the repository.
Audit Metadata