drupal-config-reconcile

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses various command-line tools such as drush, git, terminus, acli, and platform. These are standard tools for the described Drupal development tasks. The skill includes specific examples for several well-known hosting platforms including Pantheon, Acquia, and Platform.sh.
  • [DYNAMIC_EXECUTION]: The skill utilizes the drush ev command to execute a small PHP snippet for verifying configuration status. This code is statically defined in the instructions and is used for a benign purpose (verifying if configuration is deploy-safe).
  • [DATA_EXFILTRATION]: While the skill reads configuration data from remote servers, this is part of its core functionality. The instructions emphasize that operations should only read from non-production environments and only write to the local file system. No exfiltration to unauthorized external domains was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 08:51 PM
Security Audit — agent-trust-hub — drupal-config-reconcile