deploy-nodejs-app
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes explicit instructions to prevent the exposure of sensitive data, specifically warning against committing
.envfiles, credentials, or API tokens to source bundles. - [SAFE]: A safety constraint is enforced requiring explicit user confirmation before any deployment to a production domain, preventing accidental or unauthorized changes.
- [SAFE]: Network and system operations are confined to a specific Hostinger MCP server, and the instructions follow standard security practices for API token management.
- [PROMPT_INJECTION]: The skill ingests data from local project files (e.g., package.json) to determine deployment presets, creating a surface for indirect prompt injection. However, the risk is mitigated by the requirement for user confirmation and the lack of arbitrary code execution capabilities.
Audit Metadata