netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Netlify CLI (
npx netlify) and package managers (npm,yarn,pnpm). These commands facilitate build and deployment processes which are necessary for the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill triggers downloads of the Netlify CLI and various project dependencies from the npm registry. These resources originate from well-known services and established official repositories.
- [METADATA_POISONING]: There is a discrepancy in the author field within the skill's frontmatter, which lists "OpenAI" as the author while the skill is attributed to "jetbrains". This appears to be a documentation artifact from a template rather than a malicious attempt to deceive.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes project files that could contain malicious instructions.
- Ingestion points: The skill reads
package.json,netlify.toml, and Git remote URLs from the project directory. - Boundary markers: No explicit delimiters or instructions are provided to the agent to disregard instructions embedded within these project files.
- Capability inventory: The skill has the ability to execute shell commands and perform network deployments via the Netlify CLI.
- Sanitization: The skill relies on the built-in security and validation features of the Netlify CLI and npm.
Audit Metadata