bx-sites-deployment
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for deployment workflows. It does not contain executable code, prompt injections, or malicious commands.
- [DATA_EXPOSURE_AND_EXFILTRATION]: While the documentation describes how to configure credentials for various cloud services (AWS, Azure, GCP, etc.), it explicitly instructs users to use environment variables (EnvVar suffix) instead of hardcoding secrets in configuration files. This aligns with industry security best practices.
- [REMOTE_CODE_EXECUTION]: The skill mentions common CLI tools and deployment commands (e.g., bxSites deploy, rsync, ssh, git), but these are part of documented development and deployment workflows. No suspicious remote code execution patterns or unverified external downloads were identified.
Audit Metadata