apexlang-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/deploy-apex-app.shexecutes the SQLcl utility provided via theSQLCL_BINenvironment variable. This is the primary function of the skill to facilitate application deployment. - [DATA_EXPOSURE]: The skill requires a database connection string to function. It correctly directs the user to provide this via the
SQLCL_CONNECTION_STRINGenvironment variable, which is a standard and secure way to handle credentials in automation scripts, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill accepts an application directory path as an argument. The script implements robust validation to ensure the directory path does not contain special characters such as double quotes, backslashes, or newlines that could be used to escape the command context and execute unauthorized SQLcl commands.
Audit Metadata