drupal-config-reconcile
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using platform CLIs (e.g.,
terminus,acli,platform) anddrushto manage Drupal sites and local files. - [DYNAMIC_EXECUTION]: Step 6 utilizes
drush ev(eval) to execute a PHP snippet that interacts with Drupal's internalconfig.import_transformerservice to verify configuration status. - [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from remote databases, creating a surface for processing external content.
- Ingestion points: Remote configuration is fetched via
drush config:getand saved to/tmpfiles for comparison. - Boundary markers: No specific delimiters are used to wrap the ingested YAML content when processed by the agent.
- Capability inventory: The skill can write to the local filesystem, execute shell commands, evaluate PHP code, and perform git operations.
- Sanitization: The skill normalizes trailing newlines in fetched configuration files.
- [EXTERNAL_DOWNLOADS]: The skill connects to remote hosts and established hosting platforms to retrieve configuration metadata and database state using official command-line tools.
Audit Metadata