netlify-blobs

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the official @netlify/blobs NPM package for its core functionality. It also references its canonical source at https://github.com/netlify/context-and-tools. Both sources belong to a well-known service and trusted organization, making these references safe.
  • [COMMAND_EXECUTION]: The documentation provides examples of using the Netlify CLI (e.g., netlify blobs:list) for inspecting storage. These are instructional examples for the user and do not represent autonomous or unauthorized command execution by the agent.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and store external data, such as user file uploads and form submissions. While this presents a surface for indirect prompt injection, the skill includes explicit security warnings about access control and data isolation. It also features an 'Anti-Patterns' section that instructs the agent not to treat external content or logs as trusted instructions, which serves as a safety boundary.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:52 AM
Security Audit — agent-trust-hub — netlify-blobs