deepline-plays-review
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing the
deeplineCLI tool using a custom NPM registry (https://code.deepline.com/api/v2/npm/). This registry is an external source outside of official public package repositories.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, specifically Google Sheets and Drive comments, to guide agent behavior and Play revisions.\n - Ingestion points: Data is ingested via the
google_workspace_requesttool usingsheets.spreadsheets.values.getanddrive.comments.listmethods as described inSKILL.md.\n - Boundary markers: The instructions do not specify any delimiters or safety warnings for the agent when interpreting the content retrieved from the spreadsheet.\n
- Capability inventory: The skill possesses the capability to execute tools (
deepline tools execute), interact with the file system (mkdir,tee), and execute local scripts vianode.\n - Sanitization: There is no explicit sanitization or validation logic described for the feedback data read from the Workspace environment before it is used to modify Play behavior.- [COMMAND_EXECUTION]: The skill uses shell commands and local script execution to facilitate its workflow. It executes
nodeto run a local presentation script (scripts/review-sheet-presentation.mjs) and utilizes common utilities likejq,mkdir, andteefor data handling and environment setup.
Audit Metadata