typo3-solr
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: Automated alerts regarding commands piped to
python3were investigated. The commands inSKILL.md(e.g., in Section 12.0 Layer 5) utilizepython3 -m json.toolto pretty-print Solr API responses. This is a safe, standard formatting utility and does not execute remote code.\n- [CREDENTIALS_UNSAFE]: The skill uses appropriate placeholders for sensitive data. An example configuration for an OpenAI embedding model inSKILL.mdcontains a non-functionalsk-...string. Additionally, the skill explicitly advises against hardcoding credentials, directing users to use.envfiles and tools likehelhum/dotenv-connector.\n- [EXTERNAL_DOWNLOADS]: Installation instructions reference official repositories within the TYPO3 and DDEV ecosystems, such asapache-solr-for-typo3/solron Packagist andddev/ddev-typo3-solron GitHub. These are necessary and expected for the skill's functionality.\n- [COMMAND_EXECUTION]: The skill providescurlandddevcommand examples for administrative tasks such as initializing Solr cores and checking service status. These commands target local services (localhost,typo3-solr) and are standard for development workflows.
Audit Metadata