quick-deploy
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates project deployment by executing shell commands for git operations, linting, building, and running deployment CLI tools like wrangler and vercel.\n- [COMMAND_EXECUTION]: Sourcing environment files (e.g., .env.prd) using the shell source command executes the contents of those files within the agent's environment.\n- [CREDENTIALS_UNSAFE]: The skill instructs the agent to help users store Cloudflare API tokens and Account IDs in shell configuration files (~/.zshrc) for persistent access.\n- [PROMPT_INJECTION]: As an indirect prompt injection surface, the skill parses project configuration files (package.json, wrangler.toml, vercel.json) and uses their contents to generate subsequent commands and instructions.\n- [EXTERNAL_DOWNLOADS]: Uses npx to run deployment tools, which may result in downloading packages from the npm registry during execution.
Audit Metadata