typo3-ddev

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill configures a default administrator password (Joh316!!) in its environment templates, specifically within SKILL.md and assets/templates/docker-compose.web.yaml. This is intended for local development convenience and is a common practice in containerized development environments.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and validation scripts (references/prerequisites-validation.md and scripts/validate-prerequisites.sh) reference the official DDEV installation script located on GitHub at https://raw.githubusercontent.com/ddev/ddev/master/scripts/install_ddev.sh. This source is the official repository for the DDEV project.
  • [REMOTE_CODE_EXECUTION]: The recommended method for installing DDEV involves piping the official installation script directly into the bash shell. This pattern is documented as the standard setup procedure for the well-known DDEV development tool.
  • [COMMAND_EXECUTION]: Several files, including references/documentation-rendering.md and assets/templates/commands/web/install-v11, utilize sudo to perform directory cleanup and ownership adjustments. These operations are necessary to manage file permissions within Docker volumes on host systems, particularly when Docker-created files have restricted permissions on the host.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 08:35 PM