netlify-config

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents and instructs the use of several standard command-line tools for build and configuration management.
  • Evidence includes shell commands for environment variable management (netlify env:set), build process control (npm run build, make publish), and file manipulation during builds (using sed to substitute placeholders in configuration files).
  • Includes logic for build-ignore scripts using git diff or local Node.js scripts to determine build status.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing local configuration files which serves as an attack surface for indirect prompt injection.
  • Ingestion points: Reads and modifies netlify.toml, _headers, _redirects, and .env files within the project repository.
  • Boundary markers: None identified in the provided instructions to distinguish between configuration data and potential embedded instructions.
  • Capability inventory: The agent is authorized to execute shell commands (npm, yarn, git, sed), modify local configuration files, and interact with the Netlify CLI and API.
  • Sanitization: No explicit sanitization or validation logic is defined for the content of the configuration files before they are processed or used in shell commands.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources for documentation and initial configuration.
  • Fetches canonical workflows from the Netlify GitHub organization's public repository.
  • Directs users to official Netlify documentation domains (docs.netlify.com) for extended configuration references.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:15 AM