deploy-server

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The deploy.sh script is designed to execute administrative commands on a remote production server. It uses SSH to run docker, make, and ipfs-cluster-ctl commands to rebuild containers and reload configurations. This is the intended purpose of the skill for remote maintenance.
  • [CREDENTIALS_UNSAFE]: The skill handles sensitive authentication data, including SSH private keys (DEPLOY_SSH_KEY) and passwords (DEPLOY_SSH_PASSWORD). It attempts to mitigate risk by encouraging the use of SSH keys over passwords and by using the sshpass -e flag to pass passwords through environment variables rather than command-line arguments. However, storing credentials in a local .env file (even if gitignored) or environment variables remains a standard but necessary security consideration for deployment workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 09:03 AM
Security Audit — agent-trust-hub — deploy-server