netlify-blobs
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the official
@netlify/blobsNPM package for its core functionality. It also references its canonical source athttps://github.com/netlify/context-and-tools. Both sources belong to a well-known service and trusted organization, making these references safe. - [COMMAND_EXECUTION]: The documentation provides examples of using the Netlify CLI (e.g.,
netlify blobs:list) for inspecting storage. These are instructional examples for the user and do not represent autonomous or unauthorized command execution by the agent. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and store external data, such as user file uploads and form submissions. While this presents a surface for indirect prompt injection, the skill includes explicit security warnings about access control and data isolation. It also features an 'Anti-Patterns' section that instructs the agent not to treat external content or logs as trusted instructions, which serves as a safety boundary.
Audit Metadata