deploy-website

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs official CLI tools from Netlify and Vercel via the NPM registry. These are well-known services and the tools are necessary for the deployment functionality.
  • [COMMAND_EXECUTION]: Uses shell commands to perform package installation and execute deployment tasks through the verified service CLIs.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it reads project files from the website/src/ directory (Ingestion Point) and passes them to deployment tools. The skill utilizes Bash and WebFetch capabilities (Capability Inventory), but lacks explicit boundary markers or content sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 08:54 AM
Security Audit — agent-trust-hub — deploy-website