deploying-to-turboops
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate DevOps instructions for deploying projects to TurboOps. It correctly handles sensitive information by using placeholders (e.g.,
<user>,<password>,<projectId>) and advising users to mask CI/CD tokens. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill mentions external network calls to
api.turbo-ops.de. These are identified as legitimate vendor-owned resources and part of the platform's core functionality. No unauthorized data exfiltration patterns were detected. - [COMMAND_EXECUTION]: The skill contains various CLI commands for deployment (
turbo deploy,lt deployment create,docker service update). These commands are necessary for the skill's primary purpose and do not show signs of malicious intent or unauthorized access. - [CREDENTIALS_UNSAFE]: Security best practices are encouraged, such as generating passwords using hex-encoded randomness and ensuring deployment tokens are masked in GitLab settings. The skill explicitly warns against committing
.envfiles to the repository.
Audit Metadata