build-and-deploy
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure software development life cycle practices by enforcing validation of configuration files before execution.
- [COMMAND_EXECUTION]: Uses standard build and packaging commands like
npm run buildandnpx evenhub packwhich are appropriate for the application development context. - [EXTERNAL_DOWNLOADS]: Accesses the
evenhubpackaging utility via the npm registry, which is the standard delivery method for vendor-provided developer tools. - [SAFE]: Evaluated for potential indirect prompt injection. The skill ingests
app.json(Ingestion points), provides a clear field reference for validation (Boundary markers), utilizes standard build tools likenpmandBash(Capability inventory), and explicitly instructs the agent to fix or report invalid fields based on specific rules (Sanitization).
Audit Metadata