The Agent Skills Directory

[SAFE]: The skill provides structural templates and educational content for Drupal 8-11+ backend development. It includes standard Drupal patterns for controllers, forms, entities, and services.
[COMMAND_EXECUTION]: The skill references local development tools such as ddev and drush (e.g., ddev drush en mymodule -y). These are standard, well-known CLI tools for the Drupal ecosystem and are used here for legitimate module management tasks (enabling modules, clearing cache, viewing logs).
[INDIRECT_PROMPT_INJECTION]: While the skill involves generating code that processes data, it explicitly encourages security best practices such as using $this->t() for string translation, checking permissions via requirements in routing, and utilizing the Drupal Entity API instead of raw database queries. It does not ingest untrusted remote data during its own execution.

drupal-backend