netlify-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from configuration files (e.g., package.json, netlify.toml) and command-line outputs (e.g., git remote, netlify status) to determine build and deployment settings. While this is the intended functionality of a deployment tool, it represents a surface where maliciously crafted local files could attempt to influence agent behavior.
  • Ingestion points: Local configuration files and standard output from git/netlify commands.
  • Boundary markers: Absent; the agent is instructed to read and interpret these files directly.
  • Capability inventory: Includes shell command execution for building projects (npm run build), installing dependencies (npm install), and network-based deployment (netlify deploy).
  • Sanitization: No specific sanitization or validation of the file content is mentioned in the instructions.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx and npm to download the Netlify CLI and project-specific dependencies. These downloads are directed to well-known package registries (npm) and are standard for web development and deployment workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 04:38 PM