netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx netlifyto download and execute the Netlify CLI from the official package registry. This is a standard and expected operation for interacting with the Netlify deployment platform. - [COMMAND_EXECUTION]: The skill guides the agent to perform various shell operations, including
npm installfor dependency management,gitcommands for repository metadata, and Netlify CLI commands for site management and deployment. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes local project files such as
package.jsonandnetlify.tomlto determine build and publish settings. This constitutes a potential attack surface where malicious project files could attempt to influence agent behavior. - Ingestion points:
package.json,netlify.toml, andgit remote show originoutput. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the provided prompts.
- Capability inventory: The skill allows shell execution (npm, git, npx) and network operations (Netlify API communication).
- Sanitization: No content sanitization or validation logic is specified for the ingested configuration files.
Audit Metadata