warp-deploy-register-route
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by instructing the agent to fetch and parse external content from Linear ticket URLs.
- Ingestion points: Content extracted from external Linear tickets (URLs provided by the user).
- Boundary markers: None. The skill does not specify delimiters or instructions to ignore potential commands embedded within the ticket content.
- Capability inventory: The agent can execute shell commands (
git,pnpm,kubectl,gh), modify local TypeScript configuration files, and create pull requests. - Sanitization: No explicit sanitization or validation steps are defined for the data extracted from Linear tickets before it is used to drive the workflow.
- [COMMAND_EXECUTION]: The skill automates several shell commands to manage the deployment lifecycle.
- Executes
git ls-remoteagainst thehyperlane-xyz/hyperlane-registryrepository to synchronize configuration. - Uses
pnpmto run project-specific scripts such asupdate-agent-config:mainnet3anddeploy-warp-monitor.ts. - Utilizes
kubectlfor monitoring the status of Kubernetes pods andghfor creating pull requests. - While these commands are standard for the intended development workflow, they operate on data derived from external sources (Linear tickets).
Audit Metadata