saleor-deploy
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch reference configuration from the official Saleor GitHub repository (saleor/saleor-platform). This is a well-known service, and the resource is used legitimately for deployment configuration.
- [PROMPT_INJECTION]: The skill includes instructions to use
WebSearchandWebFetchfor documentation retrieval, creating an indirect prompt injection surface. - Ingestion points:
WebSearchfor deployment guides andWebFetchfor GitHub repository content (SKILL.md). - Boundary markers: No explicit delimiters are used for the external content.
- Capability inventory: The skill has access to
Write,Edit, andBashtools. - Sanitization: No specific sanitization of external documentation is implemented, but the risk is assessed as safe given the reliance on official vendor sources.
- [SAFE]: No hardcoded credentials, malicious command execution, obfuscation, or data exfiltration patterns were found. Secret management instructions explicitly state to never store secrets in source code or images.
Audit Metadata