deck-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
deckcommand-line tool to manage Gateway configurations. Instructions specify using commands likedeck gateway validateanddeck gateway difffor inspection before performing any synchronization. - [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration data from decK state files and OpenAPI documents. This risk is addressed through mandatory validation steps (
deck gateway validate) to ensure data integrity before processing. - [SAFE]: The skill mandates secure credential management, explicitly instructing the agent never to echo or commit secrets and to rely on existing environment variables or secure host settings.
Audit Metadata