deploy-shiny-app
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides a standard workflow for Shiny app deployment that aligns with industry best practices.
- [CREDENTIALS_UNSAFE]: The skill correctly handles secrets by instructing users to store tokens and API keys in
.Renvironfiles or environment variables rather than hardcoding them in the source code. It usesSys.getenv()to access these secrets securely during deployment. - [EXTERNAL_DOWNLOADS]: Dependencies are managed through standard R package registries (CRAN) and official Docker images (
rocker/shiny-verse). These are well-known and trusted sources within the R and data science communities. - [COMMAND_EXECUTION]: The use of Bash and Docker commands is strictly limited to the necessary steps for building containers and verifying deployments. No suspicious or obfuscated command execution patterns were identified.
Audit Metadata