static-site
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official DFINITY GitHub repository to fetch deployment plugins, which is a trusted source.
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard build commands like
npm run buildandicp deployto process and upload static assets. - [DYNAMIC_EXECUTION]: Configuration fields like
metadatasupport shell interpolation ($(...)), allowing the canister to incorporate dynamic data at build time as documented by the vendor. - [PRIVILEGE_ESCALATION]: The skill provides guidance on managing canister access, correctly recommending the use of granular authorization (
authorize) over full controller privileges to minimize security risks.
Audit Metadata