skills/camoa/vibe-config/safe-delete/Gen Agent Trust Hub

safe-delete

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a helper script scripts/safe-delete.sh designed to manage the deletion of DDEV projects. It utilizes the ddev CLI and the rm command for its operations.
  • [SAFE]: The safe-delete.sh script implements several defensive programming patterns: it checks for an interactive terminal ([ ! -t 0 ]) to ensure a human is present and prevents the agent from running it silently; it requires the user to type the project name exactly as a confirmation step; it performs path normalization and validation, specifically refusing to operate on the root directory (/) or the user's home directory ($HOME); and it verifies that the target folder actually contains a DDEV configuration file matching the specified project name before proceeding with any file removal.
  • [SAFE]: The instructions in SKILL.md contain "Hard rules" that forbid the agent from executing the ddev delete command or the cleanup script directly. It specifies that the agent should only prepare and present the command for the user to run in their own terminal, maintaining a human-in-the-loop requirement for destructive actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:48 AM