deploy-site
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [System Command Execution]: The skill interacts with the Power Platform CLI (pac) to perform deployment tasks, such as managing authentication and uploading site content. These actions are necessary for the skill's primary function and are performed using official tooling.
- [Modification of Environment Settings]: The skill provides a workflow to unblock JavaScript attachments if they prevent deployment. This involves changing a security setting at the environment level. The skill manages this potential risk by requiring explicit user permission before any changes are made.
- [Execution of Build Scripts]: By running npm run build, the skill executes scripts defined within the user's project. This is a standard part of the deployment lifecycle but represents a surface where external project content could influence execution.
- [Integration of Local Utility Scripts]: Several helper scripts (e.g., validate-site-integrity.js, clear-site-cache.js) are executed from the plugin root to ensure deployment success and verify site status.
Audit Metadata