typo3-solr

Pass

Audited by Gen Agent Trust Hub on Apr 16, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Automated alerts regarding commands piped to python3 were investigated. The commands in SKILL.md (e.g., in Section 12.0 Layer 5) utilize python3 -m json.tool to pretty-print Solr API responses. This is a safe, standard formatting utility and does not execute remote code.\n- [CREDENTIALS_UNSAFE]: The skill uses appropriate placeholders for sensitive data. An example configuration for an OpenAI embedding model in SKILL.md contains a non-functional sk-... string. Additionally, the skill explicitly advises against hardcoding credentials, directing users to use .env files and tools like helhum/dotenv-connector.\n- [EXTERNAL_DOWNLOADS]: Installation instructions reference official repositories within the TYPO3 and DDEV ecosystems, such as apache-solr-for-typo3/solr on Packagist and ddev/ddev-typo3-solr on GitHub. These are necessary and expected for the skill's functionality.\n- [COMMAND_EXECUTION]: The skill provides curl and ddev command examples for administrative tasks such as initializing Solr cores and checking service status. These commands target local services (localhost, typo3-solr) and are standard for development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 16, 2026, 11:57 AM