github-pages-deploy-verification
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell function
poll_deploythat executescurl,grep, andsleepcommands to verify the state of a remote web server. This is the primary intended functionality of the skill and follows best practices for deployment verification in constrained agent environments. - [INDIRECT_PROMPT_INJECTION]: The skill implements a pattern that ingests untrusted data from a remote URL during the deployment verification process. • Ingestion points: The
poll_deployfunction inSKILL.mdusescurlto fetch the body of a web page into a shell variable for pattern matching. • Boundary markers: There are no explicit instruction delimiters or markers to isolate the fetched content from the agent's context. • Capability inventory: The skill's execution environment includes shell access for network requests and string processing. • Sanitization: The fetched content is processed using shellcasestatements for string matching, which prevents the data from being directly executed as code within the polling script itself, though it remains in the agent's context.
Audit Metadata