deploy
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bashto execute a local context detector script at~/.claude/skills/deploy/lib/context-detector.sh. This is a standard mechanism for skill-specific logic. - [COMMAND_EXECUTION]: The templates provide various
curl,docker, andkubectlcommands for smoke testing and traffic management. These are educational examples intended for the user to adapt to their specific environment. - [DATA_EXPOSURE]: The skill correctly identifies that passwords (e.g.,
SMOKE_PASSWORD) and API tokens (e.g.,LD_API_TOKEN) should be stored in secrets managers and never hardcoded in scripts or code. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. All network operations (
curl,wget) are directed at internal service endpoints (e.g.,localhost,prometheus:9090) or official provider APIs (LaunchDarkly, Flipt).
Audit Metadata