drupal-config
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides instructions for managing Drupal site configurations using Drush and DDEV. It explicitly warns against the use of auto-confirm flags on remote servers and suggests safer inspection patterns like using read-only commands or the '--no' flag to prevent unintended changes.
- [DATA_EXPOSURE]: Recommends using 'config_split' for environment-specific settings like API keys and SMTP credentials, which aligns with security best practices for avoiding credential leakage across environments.
Audit Metadata