ddev-magento
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the execution of various DDEV and Magento CLI commands, such as
ddev start,ddev ssh,ddev exec, andddev magento. These are legitimate operations for managing local containerized development environments. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading official DDEV add-ons and Magento project code. These actions utilize well-known services (DDEV's GitHub and Magento's repository) and are part of the intended installation and setup workflow.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its interaction with external data sources during common development tasks.
- Ingestion points: The skill processes data from
ddev logs,ddev describeoutput, and project configuration files like.ddev/config.yamlandenv.php. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within ingested data are present.
- Capability inventory: The skill allows significant host/container interaction via
ddev ssh,ddev exec, and database management tools. - Sanitization: No explicit data sanitization or validation logic is defined for the content read from logs or configuration files.
Audit Metadata