deploy-server
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The
deploy.shscript is designed to execute administrative commands on a remote production server. It uses SSH to rundocker,make, andipfs-cluster-ctlcommands to rebuild containers and reload configurations. This is the intended purpose of the skill for remote maintenance. - [CREDENTIALS_UNSAFE]: The skill handles sensitive authentication data, including SSH private keys (
DEPLOY_SSH_KEY) and passwords (DEPLOY_SSH_PASSWORD). It attempts to mitigate risk by encouraging the use of SSH keys over passwords and by using thesshpass -eflag to pass passwords through environment variables rather than command-line arguments. However, storing credentials in a local.envfile (even if gitignored) or environment variables remains a standard but necessary security consideration for deployment workflows.
Audit Metadata