netlify-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx netlify to download and execute the Netlify CLI from the official package registry. This is a standard and expected operation for interacting with the Netlify deployment platform.
  • [COMMAND_EXECUTION]: The skill guides the agent to perform various shell operations, including npm install for dependency management, git commands for repository metadata, and Netlify CLI commands for site management and deployment.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes local project files such as package.json and netlify.toml to determine build and publish settings. This constitutes a potential attack surface where malicious project files could attempt to influence agent behavior.
  • Ingestion points: package.json, netlify.toml, and git remote show origin output.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the provided prompts.
  • Capability inventory: The skill allows shell execution (npm, git, npx) and network operations (Netlify API communication).
  • Sanitization: No content sanitization or validation logic is specified for the ingested configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 12:17 AM