deploy
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes content from the repository to guide its execution.
- Ingestion points: Workflow steps 1 and 2 in
SKILL.mdinstruct the agent to read repository files, build commands, CI/CD configs, Dockerfiles, and documentation. - Boundary markers: The skill lacks explicit instructions to treat instructions found within these files as untrusted or to isolate them from the agent's primary control logic.
- Capability inventory: The skill possesses high-privilege capabilities, including the ability to update platform configurations, modify scripts, and execute build or validation commands (Workflow steps 6 and 7 in
SKILL.md). - Sanitization: There is no evidence of sanitization or strict validation of the configuration data read from the repository before it is used to formulate deployment actions.
- [COMMAND_EXECUTION]: The skill is designed to perform command-line operations as part of its deployment and validation workflows.
- Evidence: Workflow step 7 in
SKILL.mdspecifies running local checks, builds, and smoke tests. Examples mention managing systemd services and SSH targets. This behavior is mitigated by guardrails requiring explicit user approval before mutating production environments or DNS settings.
Audit Metadata