skills/contentstack/contentstack-agent-skills/launch-trigger-and-monitor-launch-deployments/Gen Agent Trust Hub
launch-trigger-and-monitor-launch-deployments
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security defaults by explicitly instructing the agent to never expose or log deployment tokens, environment secrets, or API keys. Redaction of sensitive values from errors and summaries is required.
- [SAFE]: A safety gate is established for production environments, requiring explicit user confirmation before triggering deployments. This prevents unauthorized or accidental modifications to production infrastructure.
- [PROMPT_INJECTION]: The skill fetches deployment logs from the Launch API to diagnose failures. While this involves processing untrusted external data, the functionality is core to the skill's purpose. The instructions do not define boundary markers or sanitization for these logs, but the potential risk is mitigated by the scoped nature of the diagnostic task. Ingestion point: deployment log details fetched via GET request. Boundary markers: absent. Capability inventory: Bash, Read, and Write tools. Sanitization: not explicitly mentioned.
Audit Metadata