deploying-to-cloud

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the cloud CLI for managing applications, databases, and deployment workflows. This includes resource creation, environment configuration, and infrastructure provisioning.
  • [DYNAMIC_EXECUTION]: The skill details the use of cloud tinker and cloud command:run to execute arbitrary PHP code and shell commands on remote Laravel Cloud environments. These are administrative features of the official vendor CLI.
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its handling of external data.
  • Ingestion points: Documentation fetched from https://cloud.laravel.com/docs/llms.txt, and output from commands such as cloud deploy:monitor and cloud <resource>:list --json.
  • Boundary markers: None identified; there are no instructions to use specific delimiters or protective tags when processing external content.
  • Capability inventory: The skill has the ability to execute shell commands, perform remote code execution on production environments, and make network requests for documentation.
  • Sanitization: None identified; documentation and command outputs are processed directly to inform agent actions.
  • [EXTERNAL_DOWNLOADS]: The skill references installing the laravel/cloud-cli package via Composer. This is an official package provided by the vendor for managing their cloud platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:38 AM
Security Audit — agent-trust-hub — deploying-to-cloud