deploy-surge
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute surge CLI commands for site deployment and management. It provides instructions to install the 'surge' package globally via 'bun install -g surge' if it is not found on the system.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input through the $ARGUMENTS variable which is subsequently used to construct shell commands. While the skill includes a confirmation step, the lack of explicit sanitization for these arguments presents a potential vulnerability surface.
- Ingestion points: Untrusted data is ingested via the 'path', 'description', and 'slug' arguments in SKILL.md.
- Boundary markers: The instructions do not define boundary markers or delimiters to isolate user-supplied strings from the command structure.
- Capability inventory: The skill utilizes the Bash tool for command execution and has Read/Write access to manage the inventory file.
- Sanitization: There are no explicit requirements or steps to sanitize, validate, or escape the user-provided strings before they are passed to the shell environment.
Audit Metadata