deploy-to-cloud-engine
Warn
Audited by Snyk on Oct 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow fetches authoritative CLI reference documentation from https://cli.internetcomputer.org/llms.txt via an LLM retrieval path.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents operational procedures for deploying Internet Computer projects, managing cloud engine balances, deploying proxies, and interacting with platform services. While it guides users on browser sign-ins, console billing page actions, and executing CLI deployment commands, it does not programmatically initiate, execute, or authorize direct financial transactions, payments, or card-charging operations from within the agent's execution workflow. The billing operations mentioned (adding funds, automatic top-ups) are performed by users externally via the web console. Therefore, the financial scope is indirect (handling billable usage/deployments and managing engine balance references), placing it in the indirect financial operation category.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata