opencode-netlify

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Employs standard CLI instructions to install and configure the Netlify environment, including a process-scoped PowerShell execution policy adjustment to permit script execution on Windows.
  • [EXTERNAL_DOWNLOADS]: Installs the official Netlify CLI via the npm registry and links to established documentation from Netlify and Vercel.
  • [PROMPT_INJECTION]: Includes a serverless function that accepts and processes user text for AI model interaction. This design incorporates basic input validation, such as trimming whitespace and a 500-character limit, and utilizes a specific system prompt to constrain model behavior. Ingestion occurs in 'netlify/functions/ask-ai.mjs', which uses the fetch API to communicate with a third-party AI service. Boundaries are established through a developer-defined system prompt, and capabilities include network communication with an external API.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 02:34 AM
Security Audit — agent-trust-hub — opencode-netlify