digital-ocean
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Uses the doctl CLI tool and SSH to automate the provisioning and verification of cloud infrastructure such as Droplets and firewalls.
- [EXTERNAL_DOWNLOADS]: Fetches the doctl CLI binary from the official DigitalOcean GitHub releases page.
- [COMMAND_EXECUTION]: Configures network firewalls with inbound rules that allow traffic on several ports from any IP address (0.0.0.0/0), which is documented as a requirement for the intended application services.
- [SAFE]: Correctly manages sensitive credentials like DigitalOcean API tokens and SSH keys using environment variables and local configuration files, avoiding hardcoded secrets.
- [SAFE]: Transparently discloses the use of a DigitalOcean referral link in the prerequisites section.
Audit Metadata