typo3-shadcn-content-elements
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions emphasize security best practices, such as storing sensitive credentials like CAPTCHA keys in environment variables or Site Settings rather than hardcoding them in templates or fixtures.\n- [COMMAND_EXECUTION]: The skill uses standard development commands (php, npx, rg) to perform static analysis and audit the integrity of TYPO3 Content Blocks. These are executed locally within the project context.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes npx shadcn@latest, a well-known utility for managing UI components. This is a standard practice in modern frontend development and targets a reputable registry.\n- [DATA_EXFILTRATION]: The included audit script (scripts/audit-content-elements.php) reads local configuration files to verify schema compliance and field usage. No data exfiltration or external transmission of this information was identified, and the script operates strictly on local project data.\n- [PROMPT_INJECTION]: The skill processes user-controlled templates and configurations, which creates an indirect injection surface (Category 8). However, the skill includes explicit auditing steps and automated scripts to validate these files, which is a standard and safe practice for developer-oriented tools.
Audit Metadata