drupal-tooling

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for executing arbitrary shell commands inside Docker containers via ddev exec and arbitrary PHP code snippets using drush php:eval. These are standard features of DDEV and Drush used for debugging and site management.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources through git clone for repository setup, ddev composer for package management, and ddev get for installing environment add-ons from remote sources.
  • [DATA_EXFILTRATION]: The skill documents commands for pulling sensitive data (databases and files) from production environments using ddev pull and drush sql:sync. It also includes the ddev share command, which uses ngrok to create a public URL for the local development environment.
  • [CREDENTIALS_UNSAFE]: The skill provides examples for managing user authentication, including generating one-time login URLs (drush uli) and setting passwords via the command line (drush user:password). These are documented as examples for administrative tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 12:38 PM