deploy
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
pipecatCLI anduvbuild tool to interact with cloud services and manage local environments. It also executes a local Python wrapper scriptscripts/safe_cloud_metadata.pyto handle sensitive metadata operations. - [EXTERNAL_DOWNLOADS]: Instructions include fetching
uvbinaries from official sources, requiring the use of immutable digests for integrity verification during the preparation phase. - [DYNAMIC_EXECUTION]: Supports building Docker images and creating deployment archives from source code. The skill enforces strict staging procedures, such as verifying archive member hashes and preventing the use of symlinks, to ensure the integrity of the generated artifacts.
- [DATA_EXFILTRATION]: Manages the upload of source code and configuration to Pipecat Cloud. To prevent accidental secret leakage, the skill explicitly excludes
.envfiles, credentials, and virtual environments from the build context and utilizes a redaction boundary to protect thePIPECAT_TOKENandDaily API keyduring metadata retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from cloud APIs and documentation which could potentially contain malicious instructions.
- Ingestion points: Retrieves organization metadata, agent status, and CLI documentation via the
pipecattool. - Boundary markers: Employs a "value-safe redaction/allowlist boundary" for command outputs and documentation retrieval.
- Capability inventory: Includes subprocess execution (
pipecat), file system manipulation for staging, and network-based deployment operations. - Sanitization: Utilizes a specialized metadata wrapper script to emit only schema-validated, allowlisted metadata fields while withholding sensitive details like emails and credentials.
Audit Metadata