netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands such as
npx netlify,npm install, andgit remoteto build and deploy web applications. These commands are standard for modern web development workflows and are used here to interact with the well-known Netlify service. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project configuration files, specifically
package.jsonandnetlify.toml, to determine framework-specific build settings. This represents a potential attack surface where malicious project files could attempt to influence agent behavior. - Ingestion points: Project metadata files
package.jsonandnetlify.toml(SKILL.md). - Boundary markers: None explicitly defined; the skill relies on the standard interpretation of configuration files by the CLI tools.
- Capability inventory: Includes shell command execution (
npx,npm,git) and authenticated network communication with Netlify APIs. - Sanitization: None detected; the skill assumes valid project configuration files are provided by the user.
Audit Metadata