contribution-setup
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Performs environment detection using shell commands such as
command -v,glab auth status, andssh -T. These are used to verify the presence and configuration of development tools without performing unauthorized actions. - [EXTERNAL_DOWNLOADS]: Provides instructions and offers to facilitate the installation of common Drupal development tools (e.g.,
glab,drupalorg-cli) from well-known community sources. The skill guides the user through these processes rather than executing silent or forced downloads. - [INDIRECT_PROMPT_INJECTION]: The skill parses project-specific files like
.gitlab-ci.yml,composer.json, and.ddev/config.yamlto synchronize the local environment with project requirements. - Ingestion points: Project configuration files parsed during the detection phase (Step 3).
- Boundary markers: None specified.
- Capability inventory: The skill has capabilities to write files and execute shell commands to stand up the development environment.
- Sanitization: None specified.
Audit Metadata