deck-gateway

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the deck command-line tool to manage Gateway configurations. Instructions specify using commands like deck gateway validate and deck gateway diff for inspection before performing any synchronization.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration data from decK state files and OpenAPI documents. This risk is addressed through mandatory validation steps (deck gateway validate) to ensure data integrity before processing.
  • [SAFE]: The skill mandates secure credential management, explicitly instructing the agent never to echo or commit secrets and to rely on existing environment variables or secure host settings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:57 AM