netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from configuration files (e.g.,
package.json,netlify.toml) and command-line outputs (e.g.,git remote,netlify status) to determine build and deployment settings. While this is the intended functionality of a deployment tool, it represents a surface where maliciously crafted local files could attempt to influence agent behavior. - Ingestion points: Local configuration files and standard output from git/netlify commands.
- Boundary markers: Absent; the agent is instructed to read and interpret these files directly.
- Capability inventory: Includes shell command execution for building projects (
npm run build), installing dependencies (npm install), and network-based deployment (netlify deploy). - Sanitization: No specific sanitization or validation of the file content is mentioned in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npxandnpmto download the Netlify CLI and project-specific dependencies. These downloads are directed to well-known package registries (npm) and are standard for web development and deployment workflows.
Audit Metadata