digitalocean
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing Ruby scripts via the shell. These scripts accept user-provided arguments such as droplet IDs, resource names, and actions. While the Ruby scripts handle these arguments safely through the standard argument vector (ARGV), the agent is instructed to use these in shell commands, which is a standard operational pattern for this type of integration.
- [SAFE]: The skill implements secure credential management by storing the DigitalOcean API token in a localized configuration directory (~/.config/digitalocean/token) with restricted file permissions (chmod 0600). This ensures the token is not stored within the skill repository or exposed in application logs.
- [SAFE]: The instructions explicitly mandate human-in-the-loop confirmation for all state-changing or cost-incurring operations, such as creating droplets, rebooting servers, or taking snapshots. This provides a critical layer of protection against accidental or unauthorized infrastructure changes.
- [SAFE]: All network operations are directed exclusively to the official DigitalOcean API v2 endpoints (api.digitalocean.com). The code uses standard library components without external dependencies, minimizing the supply chain attack surface.
Audit Metadata