drupal-tooling
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing arbitrary shell commands inside Docker containers via
ddev execand arbitrary PHP code snippets usingdrush php:eval. These are standard features of DDEV and Drush used for debugging and site management. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources through
git clonefor repository setup,ddev composerfor package management, andddev getfor installing environment add-ons from remote sources. - [DATA_EXFILTRATION]: The skill documents commands for pulling sensitive data (databases and files) from production environments using
ddev pullanddrush sql:sync. It also includes theddev sharecommand, which uses ngrok to create a public URL for the local development environment. - [CREDENTIALS_UNSAFE]: The skill provides examples for managing user authentication, including generating one-time login URLs (
drush uli) and setting passwords via the command line (drush user:password). These are documented as examples for administrative tasks.
Audit Metadata