cube-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Cube CLI installation script from the vendor's official GitHub repository.
- [COMMAND_EXECUTION]: Uses the
cubecommand-line tool to perform deployment tasks, manage environment variables, and tail logs. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data such as build errors and application logs.
- Ingestion points: Reads and reports output from
cube deployments build-statusandcube logsas described in SKILL.md. - Boundary markers: No explicit delimiters are used for log output, though the skill provides instructions for specific interpretation of errors.
- Capability inventory: Executes various deployment and configuration commands via the Cube CLI.
- Sanitization: Includes explicit instructions to never echo credentials (tokens) or secret variable values back to the user or into transcripts.
Audit Metadata