daytona-dev
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Daytona CLI from Homebrew or GitHub (daytonaio/daytona). This is a well-known development tool for cloud sandboxes.
- [COMMAND_EXECUTION]: Executes local scripts in the .devcontainer/ directory and system commands via daytona exec to manage the sandbox lifecycle and services.
- [CREDENTIALS_UNSAFE]: Mentions the use of a volume for secrets (/daytona-secrets). This is used for standard credential management within the development environment and does not involve exfiltration.
Audit Metadata