netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to manage the deployment workflow.
- Evidence: Uses
npx netlify status,npx netlify login,npx netlify deploy, andgit remote show originto interact with the environment and Netlify services. - [EXTERNAL_DOWNLOADS]: The skill triggers downloads of the Netlify CLI and project dependencies from the official npm registry.
- Evidence: Commands like
npx netlifyandnpm installfetch external packages required for the build and deployment process. - [SAFE]: The skill follows security best practices for secret management and authentication.
- Evidence: Explicitly warns against committing secrets to Git and directs users to use environment variables (
NETLIFY_AUTH_TOKEN) or the official OAuth login flow.
Audit Metadata