mkfast-deploy
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
pnpm dlx @better-auth/cli@latest secretto generate secrets. This command downloads and executes a package from the official npm registry, which is a standard procedure for this specific tech stack. - [COMMAND_EXECUTION]: The skill executes various shell commands including
wrangler deploy,wrangler secret bulk,pnpm run build, andcurlfor site verification. These are essential for Cloudflare Workers deployment and post-deployment validation. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface by reading untrusted project configuration files (such as
package.json,wrangler.jsonc, and.envfiles) to determine the project profile and component setup. This information is used to customize the deployment steps. - Ingestion points: Reads
package.json,wrangler.jsonc,.env.example,.env.production, and.env.localto extract component status and variables. - Boundary markers: Not explicitly present for file contents, though analysis is restricted to identifying specific keys and dependencies.
- Capability inventory: Performs subprocess calls for build/deploy and network operations via
curlandwrangler. - Sanitization: No specific sanitization of file content is mentioned before it influences the generated checklist.
Audit Metadata