environment-deployer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
dxs(Datex Studio) CLI for environment discovery and deployment. The commands includedxs auth status,dxs env list,dxs api GET, anddxs env deploy. These are standard operations for managing the vendor's platform and do not involve arbitrary command execution or shell injection risks. The instructions explicitly warn against blind re-execution and require strict target resolution before mutation. - [PRIVILEGE_ESCALATION]: The skill mentions a specific 'Deploy Access' grant (
HasDeployAccess) and notes that CLI flags or credential refreshes cannot bypass this server-side authorization. This is a security feature, not a vulnerability. - [SAFE]: All external references, such as the GitHub links in the source section, point to the vendor's own repository (
github.com/datex/datex-studio-cli). These are used for documentation and verification of the CLI's behavior.
Audit Metadata