typo3-conformance
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a set of shell scripts (e.g.,
scripts/check-architecture.sh,scripts/check-coding-standards.sh) to perform static analysis on TYPO3 extension code. These operations are limited to reading local files using standard utilities likefind,grep, andjqfor the purpose of generating conformance reports. - [DYNAMIC_EXECUTION]: The
checkpoints.yamlfile contains advanced PHP one-liners executed viaphp -r. These are used to tokenize and analyze PHP source code at a granular level, ensuring that security checks (such as detecting prohibited process-execution functions) correctly ignore comments and literal strings. - [EXTERNAL_DOWNLOADS]: The skill and its references point to trusted community resources, including official TYPO3 documentation (
docs.typo3.org), package registries (packagist.org), and the TYPO3 version API (get.typo3.org). These references are used for standard validation and version compatibility checks.
Audit Metadata