replica-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (e.g., parity.py, sweep.py, listing.py) and standard development tools (npx, npm, eas). These commands are used for preflight testing and building the application, which is consistent with the skill's stated purpose of deployment automation. The scripts are located in relative paths within the installation directory.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files such as features.csv, brand.json, and listing.json. While these files are external inputs, the skill uses them as parameters for specific utility scripts. The risk is further mitigated by the requirement for explicit user confirmation before any production deployment actions are finalized.
Audit Metadata