ddev-docker-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple system commands to manage and cleanup Docker resources.
- Executes
ddev listto identify active projects and build a protection allowlist. - Executes
docker volume ls,docker volume rm,docker builder prune, anddocker image pruneto manage disk usage. - Uses
jqfor processing structured JSON output from DDEV. - [EXTERNAL_DOWNLOADS]: The documentation references external software installation for dependencies.
- Suggests installing
jqviabrew install jq(Homebrew) if it is missing from the system. - [INDIRECT_PROMPT_INJECTION]: The skill's execution logic is influenced by system state data that could be controlled by an attacker if they can name projects or volumes.
- Ingestion points: Reads project names from
ddev list -jand volume names fromdocker volume lswithinscripts/lib.sh. - Boundary markers: The script implements a strict allowlist-based safety model in
keep_volumeto ensure only orphaned volumes are targeted. - Capability inventory: The skill possesses capabilities to stop DDEV projects and delete Docker volumes, images, and build cache in
scripts/prune.sh. - Sanitization: External project and volume names are parsed using
jqand handled with shell quoting in script logic to prevent command injection within the cleanup routines.
Audit Metadata