typo3-docs
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's operations are consistent with its purpose of automating TYPO3 documentation workflows. It reads local project source files and generates structured documentation scaffolds.
- [EXTERNAL_DOWNLOADS]: The skill interacts with well-known services including GitHub and GitLab to extract repository metadata via their official CLI tools (
ghandglab). These operations are documented neutrally and are essential for populating documentation metadata. - [COMMAND_EXECUTION]: Local bash scripts perform analysis on the extension's source code. One script uses a PHP subprocess to include the local
ext_emconf.phpfile for metadata extraction, which is a standard procedure in TYPO3 development. - [EXTERNAL_DOWNLOADS]: Documentation rendering is facilitated through the official TYPO3 rendering Docker image (
ghcr.io/typo3-documentation/render-guides:latest), which is a trusted source from a well-known organization.
Audit Metadata