ddev-ops

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The audit-ddev-config.py script programmatically invokes the git binary to audit the project's configuration. It includes specific security mitigations, such as enforcing absolute paths for binaries to prevent local stub execution and disabling core.fsmonitor to prevent unauthorized execution of repository-supplied commands.
  • [COMMAND_EXECUTION]: The run-python.sh script is used to bootstrap the execution of Python tools by locating a valid local interpreter.
  • [EXTERNAL_DOWNLOADS]: The check-ddev-facts.py script retrieves DDEV release data and software end-of-life information from official GitHub repositories and the well-known endoflife.date service. These network requests are transparently documented and used solely for maintaining the accuracy of the skill's data.
  • [SAFE]: The skill provides security-focused guidance, specifically warning users against common pitfalls like forwarding host SSH agents into containers or committing production credentials to the repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:31 PM