git-commit-push-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute deployment commands and scripts, such as
scripts/deploy.shornpm run deploy, as configured within the repository's own documentation and project files. This is the primary intended function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes instructions from repository files such as
AGENTS.mdand CI configurations. It incorporates specific safety measures to mitigate risks from potentially malicious repository content, including requirements to strictly follow documented routes, verify commit SHAs for artifacts, and explicitly prohibiting the printing or committing of secrets.
Audit Metadata