opencode-netlify
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs standard CLI instructions to install and configure the Netlify environment, including a process-scoped PowerShell execution policy adjustment to permit script execution on Windows.
- [EXTERNAL_DOWNLOADS]: Installs the official Netlify CLI via the npm registry and links to established documentation from Netlify and Vercel.
- [PROMPT_INJECTION]: Includes a serverless function that accepts and processes user text for AI model interaction. This design incorporates basic input validation, such as trimming whitespace and a 500-character limit, and utilizes a specific system prompt to constrain model behavior. Ingestion occurs in 'netlify/functions/ask-ai.mjs', which uses the fetch API to communicate with a third-party AI service. Boundaries are established through a developer-defined system prompt, and capabilities include network communication with an external API.
Audit Metadata