cloud-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and configuration templates for cloud deployments without any executable scripts or binary files.
- [SAFE]: Instructions include proactive security measures such as mandatory infrastructure linting (checkov, tfsec), secret management through dedicated managers, and human-in-the-loop confirmation for production deployments.
- [SAFE]: No signs of prompt injection, data exfiltration, or obfuscation were found in the metadata or body content.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data for deployment configurations (Ingestion: User deployment requests). While explicit boundary markers are absent, the skill provides specific guardrails for the agent to follow. The capability inventory includes writing infrastructure-as-code files (Capability: vercel.json, railway.toml, sst.config.ts). Sanitization is implemented through explicit instructions to refuse insecure configurations (e.g., open security groups) and mandatory human-in-the-loop confirmation gates for production changes.
Audit Metadata