typo3-scheduler-jobs
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local TYPO3 CLI commands and a provided audit script to inspect the system state. These operations are limited to the project directory and are consistent with its stated purpose of scheduler management.
- [DATA_EXPOSURE]: The bundled
audit-scheduler.phpscript reads scheduler configuration and site data from the database. It implements specific security measures by redacting arbitrary task parameters and exposing only known-safe fields (e.g., maintenance job IDs), preventing accidental exposure of sensitive credentials stored in task objects. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the TYPO3 runtime. While it ingests external database content, the audit script's output is structured JSON with filtered fields, and the skill instructions emphasize human verification of all proposed changes, mitigating the risk of instructions embedded in the data being blindly followed.
Audit Metadata