setup-hosting
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured deployment workflow with explicit approval gates for sensitive operations like applying database migrations or promoting builds.
- [SAFE]: Credentials and secrets are managed securely; the tool reads them from standard input or private files and uses a scanning utility to prevent accidental leakage into logs or changelogs.
- [SAFE]: Security audit scripts are included to detect common misconfigurations, such as database tables lacking Row-Level Security (RLS).
- [SAFE]: All external network requests are directed to legitimate service providers (Supabase, Vercel) or the user's configured live address for health checks.
- [SAFE]: While the skill references 'future' versions of some dependencies (e.g., Next.js 16, Vercel CLI 60), these appear to be placeholders or part of a hypothetical test environment and do not introduce security risks.
Audit Metadata