bounded-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
boundedCLI tool to perform all operations, including project setup, deployment, data plane interactions, and environment management. - [EXTERNAL_DOWNLOADS]: The skill fetches the Bounded CLI binary and updates from the vendor's official release domain at
get.bounded.sh. - [REMOTE_CODE_EXECUTION]: The documentation provides instructions to install or update the platform CLI using a
curl | shpattern from the vendor's HTTPS release host. - [CREDENTIALS_UNSAFE]: The skill interacts with sensitive local files in
~/.bounded/, including Solana ed25519 secret keys and web session tokens. It provides guidance on usingchmodfor file safety and automatically maintains.gitignorerules to prevent these secrets from being committed to version control. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from local project files and CLI error responses to guide the agent's workflow. It also accepts natural language prompts for app creation and editing which are sent to the platform's build agent. Ingestion points: Reads
bounded.json,policy.json, and terminal output from theboundedtool. Boundary markers: The skill uses backticks for commands and structured sections to separate instructions from data. Capability inventory: The skill allows for filesystem access, shell command execution, and network operations through the platform CLI. Sanitization: The CLI tool performs schema validation and policy verification via thebounded verifycommand. - [DYNAMIC_EXECUTION]: The skill includes a Python script to parse and display metadata from a local JSON session file.
Audit Metadata