skills/mengto/skills/netlify-deploy/Gen Agent Trust Hub

netlify-deploy

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands to manage the deployment workflow.
  • Evidence: Uses npx netlify status, npx netlify login, npx netlify deploy, and git remote show origin to interact with the environment and Netlify services.
  • [EXTERNAL_DOWNLOADS]: The skill triggers downloads of the Netlify CLI and project dependencies from the official npm registry.
  • Evidence: Commands like npx netlify and npm install fetch external packages required for the build and deployment process.
  • [SAFE]: The skill follows security best practices for secret management and authentication.
  • Evidence: Explicitly warns against committing secrets to Git and directs users to use environment variables (NETLIFY_AUTH_TOKEN) or the official OAuth login flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 08:34 AM
Security Audit — agent-trust-hub — netlify-deploy