deploy
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various CLI commands using
pipecatanddockerto handle authentication, set secrets, and manage agent deployments. These operations are core to the skill's purpose as a deployment tool. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration and environment files to prepare the deployment payload.
- Ingestion points: Reads and parses
pcc-deploy.tomland.envfiles located in the project directory. - Boundary markers: None identified; the skill reads the files directly to pass values to the CLI tool.
- Capability inventory: Includes subprocess execution for deployment (
pipecat cloud deploy), secret management (pipecat cloud secrets set), and package locking (uv lock). - Sanitization: The skill passes data from these files directly as arguments or file inputs to the CLI commands without additional internal filtering.
Audit Metadata