render-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute a shell script for installing the Render CLI tool.
- Evidence:
curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | shin SKILL.md. - Context: The source is the official GitHub organization for Render, a well-known cloud services provider.
- [EXTERNAL_DOWNLOADS]: Downloads the CLI installation script from Render's official repository.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes codebase content to determine deployment settings, creating a surface for potential indirect prompt injection.
- Ingestion points: Local project files analyzed during the deployment workflow.
- Boundary markers: Not explicitly defined in the skill instructions.
- Capability inventory: Includes file system access, network requests to Render APIs via MCP, and shell command execution.
- Sanitization: No specific sanitization logic is described for data read from the user codebase.
Audit Metadata