opendeploy-auth
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to manage vendor-specific software and authentication.
- Evidence: Runs
npm list -g @opendeploydev/cli,npm view, andopendeployCLI tools to verify installation and check authentication status (SKILL.md). - [DATA_EXFILTRATION]: Accesses vendor-specific local credential files.
- Evidence: Manages authentication by reading and writing to
~/.opendeploy/auth.json, which contains API keys and gateway configurations (SKILL.md). - [PROMPT_INJECTION]: Indirect prompt injection attack surface identified in the data processing flow.
- Ingestion points: The agent processes output from external CLI tools (
npm,opendeploy) which could be influenced by external environment or API responses (SKILL.md). - Boundary markers: Absent; there are no explicit delimiters or instructions to ignore embedded commands in CLI output.
- Capability inventory: The skill has the ability to execute subprocesses via the
npmandopendeploycommands (SKILL.md). - Sanitization: No sanitization or validation of CLI output is specified before processing by the agent.
Audit Metadata