The Agent Skills Directory

[COMMAND_EXECUTION]: The exec-host hook defined in the assets/templates/config.yaml template performs unquoted shell variable interpolation. Specifically, the variables $BRANCH, $COMMIT, and $PR are inserted into a ddev exec command string inside double quotes. This creates a command injection vector on the host machine if the repository's git branch name or pull request metadata contains shell metacharacters (e.g., a branch named $(id)).
[CREDENTIALS_UNSAFE]: The skill utilizes a hardcoded default password Joh316!! for the TYPO3 admin user across multiple templates (SKILL.md, assets/templates/docker-compose.web.yaml, assets/templates/Makefile.template). While documented as a development default, it represents a fixed credential.
[PRIVILEGE_ESCALATION]: Several scripts and documentation examples use sudo to perform environment management tasks, such as starting the Docker daemon, adjusting file permissions on volumes, and cleaning up documentation build artifacts (e.g., in scripts/validate-prerequisites.sh, references/windows-fixes.md, and references/documentation-rendering.md).
[REMOTE_CODE_EXECUTION]: The prerequisites validation script (scripts/validate-prerequisites.sh) and the related documentation recommend installing DDEV and Docker by piping remote shell scripts directly into a shell (curl | bash). While these target well-known services (Docker and DDEV), this remains a high-risk execution pattern.
[PERSISTENCE]: The skill implements persistence for the TYPO3 scheduler using cron jobs, either via the Ofelia container or traditional system cron (assets/templates/docker-compose.ofelia.yaml.optional, assets/templates/web-build/install-cron.sh.optional). This ensures background tasks continue across session restarts.
[INDIRECT_PROMPT_INJECTION]: The skill includes automation scripts (generate-index, configure-extension) that ingest data from composer.json and .ddev/config.yaml. The extracted metadata is interpolated into shell commands and templates using sed and string replacement, providing a surface where malicious project metadata could influence the behavior of the generation tools.
[DYNAMIC_EXECUTION]: The scripts/provision-without-ddev.sh script uses php -r to dynamically execute PHP code for database connection testing, which is a common pattern for environment probing.

typo3-ddev