mj-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the full deployment pipeline by executing shell commands for version control (git), project building (npm/pnpm/yarn), and deployment (wrangler, vercel). It also utilizes dynamic execution methods such as the
sourcecommand to load environment variables andnode -eto parse local configuration files. Additionally, it instructs the user to modify shell profile configurations like~/.zshrcto persist deployment credentials. - [DATA_EXFILTRATION]: Accesses and reads sensitive environment variable files, including
.env,.env.production, and.env.prd, to retrieve authentication tokens (e.g.,CLOUDFLARE_API_TOKEN) required for deployment. This access is limited to standard local paths for legitimate deployment purposes. - [PROMPT_INJECTION]:
- Ingestion points: The skill ingests untrusted data from the local repository, specifically through
git diffoutput and the contents ofpackage.jsonandwrangler.jsoncfiles to generate commit messages and determine deployment logic. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when interpolating local file data into the agent's context.
- Capability inventory: The skill possesses significant capabilities, including the ability to run arbitrary shell commands via
npmscripts, perform network operations viagit push, and deploy code to external cloud platforms. - Sanitization: There is no evidence of sanitization or validation performed on the data ingested from the repository files before processing.
Audit Metadata