safe-delete
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script
scripts/safe-delete.shdesigned to manage the deletion of DDEV projects. It utilizes theddevCLI and thermcommand for its operations. - [SAFE]: The
safe-delete.shscript implements several defensive programming patterns: it checks for an interactive terminal ([ ! -t 0 ]) to ensure a human is present and prevents the agent from running it silently; it requires the user to type the project name exactly as a confirmation step; it performs path normalization and validation, specifically refusing to operate on the root directory (/) or the user's home directory ($HOME); and it verifies that the target folder actually contains a DDEV configuration file matching the specified project name before proceeding with any file removal. - [SAFE]: The instructions in
SKILL.mdcontain "Hard rules" that forbid the agent from executing theddev deletecommand or the cleanup script directly. It specifies that the agent should only prepare and present the command for the user to run in their own terminal, maintaining a human-in-the-loop requirement for destructive actions.
Audit Metadata