contribution-setup

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Performs environment detection using shell commands such as command -v, glab auth status, and ssh -T. These are used to verify the presence and configuration of development tools without performing unauthorized actions.
  • [EXTERNAL_DOWNLOADS]: Provides instructions and offers to facilitate the installation of common Drupal development tools (e.g., glab, drupalorg-cli) from well-known community sources. The skill guides the user through these processes rather than executing silent or forced downloads.
  • [INDIRECT_PROMPT_INJECTION]: The skill parses project-specific files like .gitlab-ci.yml, composer.json, and .ddev/config.yaml to synchronize the local environment with project requirements.
  • Ingestion points: Project configuration files parsed during the detection phase (Step 3).
  • Boundary markers: None specified.
  • Capability inventory: The skill has capabilities to write files and execute shell commands to stand up the development environment.
  • Sanitization: None specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:40 PM