deploy-shiny-app

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill provides a standard workflow for Shiny app deployment that aligns with industry best practices.
  • [CREDENTIALS_UNSAFE]: The skill correctly handles secrets by instructing users to store tokens and API keys in .Renviron files or environment variables rather than hardcoding them in the source code. It uses Sys.getenv() to access these secrets securely during deployment.
  • [EXTERNAL_DOWNLOADS]: Dependencies are managed through standard R package registries (CRAN) and official Docker images (rocker/shiny-verse). These are well-known and trusted sources within the R and data science communities.
  • [COMMAND_EXECUTION]: The use of Bash and Docker commands is strictly limited to the necessary steps for building containers and verifying deployments. No suspicious or obfuscated command execution patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 07:13 AM