ddev-docker-cleanup

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple system commands to manage and cleanup Docker resources.
  • Executes ddev list to identify active projects and build a protection allowlist.
  • Executes docker volume ls, docker volume rm, docker builder prune, and docker image prune to manage disk usage.
  • Uses jq for processing structured JSON output from DDEV.
  • [EXTERNAL_DOWNLOADS]: The documentation references external software installation for dependencies.
  • Suggests installing jq via brew install jq (Homebrew) if it is missing from the system.
  • [INDIRECT_PROMPT_INJECTION]: The skill's execution logic is influenced by system state data that could be controlled by an attacker if they can name projects or volumes.
  • Ingestion points: Reads project names from ddev list -j and volume names from docker volume ls within scripts/lib.sh.
  • Boundary markers: The script implements a strict allowlist-based safety model in keep_volume to ensure only orphaned volumes are targeted.
  • Capability inventory: The skill possesses capabilities to stop DDEV projects and delete Docker volumes, images, and build cache in scripts/prune.sh.
  • Sanitization: External project and volume names are parsed using jq and handled with shell quoting in script logic to prevent command injection within the cleanup routines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 02:33 PM
Security Audit — agent-trust-hub — ddev-docker-cleanup