netlify-config
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and instructs the use of several standard command-line tools for build and configuration management.
- Evidence includes shell commands for environment variable management (
netlify env:set), build process control (npm run build,make publish), and file manipulation during builds (usingsedto substitute placeholders in configuration files). - Includes logic for build-ignore scripts using
git diffor local Node.js scripts to determine build status. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing local configuration files which serves as an attack surface for indirect prompt injection.
- Ingestion points: Reads and modifies
netlify.toml,_headers,_redirects, and.envfiles within the project repository. - Boundary markers: None identified in the provided instructions to distinguish between configuration data and potential embedded instructions.
- Capability inventory: The agent is authorized to execute shell commands (
npm,yarn,git,sed), modify local configuration files, and interact with the Netlify CLI and API. - Sanitization: No explicit sanitization or validation logic is defined for the content of the configuration files before they are processed or used in shell commands.
- [EXTERNAL_DOWNLOADS]: The skill references external resources for documentation and initial configuration.
- Fetches canonical workflows from the Netlify GitHub organization's public repository.
- Directs users to official Netlify documentation domains (
docs.netlify.com) for extended configuration references.
Audit Metadata