start-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze project files such as
vite.config.tsandpackage.jsonusing theexplore-codebasetool. This represents a standard ingestion point for untrusted data in a development context. - Ingestion points: Project configuration files (
vite.config.ts,package.json) and scripts. - Boundary markers: None specified for the codebase ingestion.
- Capability inventory: The skill facilitates build and deployment command generation but does not include direct dangerous execution patterns like
evalor arbitrary network requests in the instructions. - Sanitization: None specified for code analysis.
- [EXTERNAL_DOWNLOADS]: The documentation guides the installation of well-known, legitimate ecosystem dependencies including
@tanstack/react-start,vite,nitro,@cloudflare/vite-plugin, andwrangler. These are standard industry tools for the described deployment tasks. - [COMMAND_EXECUTION]: The templates provide standard build and deployment commands (e.g.,
vite build,wrangler deploy). These are standard operational commands for the framework and are intended to be executed within the developer's controlled environment.
Audit Metadata