dev-branch-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use several command-line tools, including
git,fly(Concourse CLI),erb(Ruby templating), andgrep. These tools are used for their intended purpose: managing source code branches, interacting with a CI/CD server, and generating configuration files. - [INDIRECT_PROMPT_INJECTION]: The skill defines decision logic based on the output of external commands. It instructs the agent to check for the existence of branches via
git ls-remoteand verify pipeline wiring usinggrepbefore proceeding with sensitive operations likegit pushorfly set-pipeline. While this creates a surface where external data influences agent behavior, it is implemented here as a safety check. - [DYNAMIC_EXECUTION]: The workflow involves generating a YAML configuration file from an ERB template (
erb pipeline.yaml.erb > pipeline.yaml) and then applying that configuration to the Concourse CI system viafly set-pipeline. This is a standard method for managing complex infrastructure-as-code deployments.
Audit Metadata