pc-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill facilitates the transmission of project source code to the vendor's platform.
- For projects without a git remote, the skill creates a
tar.gzarchive of the local project directory and uploads it toploi.cloudusing a signed URL andcurl. - The archiving process respects
.gitignoreor.dockerignorefiles to prevent unintended file exposure. - [COMMAND_EXECUTION]: The skill uses shell commands to automate development workflows.
- It executes
gitfor repository discovery and branch identification. - It uses
tarfor project archiving andcurlfor network uploads to the Ploi Cloud API. - It performs local file system operations using
Read,Glob, andGrepto detect project frameworks and requirements. - [PROMPT_INJECTION]: The skill processes untrusted local files which creates a surface for indirect prompt injection.
- Ingestion points: The agent reads and parses configuration files including
composer.json,package.json,wp-config.php, and.env.examplein the project root. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded instructions within these data files.
- Capability inventory: The agent has access to a wide range of powerful tools, including a
Bashshell and numerous MCP tools for creating and destroying cloud infrastructure. - Sanitization: No explicit sanitization or validation of the file content is performed before the agent uses the extracted data to configure deployment parameters.
Audit Metadata