sparkfabrik-drupal-containers
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill provides detailed instructions for executing commands inside Docker containers (
docker compose run) and on the host machine viamakeanddrush. This provides an agent with extensive capabilities to interact with the local development filesystem and processes.\n- [EXTERNAL_DOWNLOADS] (INFO): The skill referencesfs-cli, a tool specific to the SparkFabrik workflow. While it is not installed by the skill, it is an unverifiable external dependency required for functionality.\n- [PROMPT_INJECTION] (LOW): Category 8 (Indirect Prompt Injection) surface identified:\n - Ingestion points: The skill instructs the agent to parse output from
docker compose psandfs-cli pkg:get-urlsto discover service names and URLs (SKILL.md).\n - Boundary markers: None; the agent is expected to directly use the output from these tools to construct subsequent commands.\n
- Capability inventory:
docker compose run,make,drush, andcurl(SKILL.md).\n - Sanitization: None; environment-provided service names are used directly in URLs and command execution.
Audit Metadata