netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for managing deployments using official Netlify CLI tools and services. No suspicious or malicious command patterns were identified.
- [SAFE]: Security best practices are proactively recommended, such as warning the user against committing secrets to version control and ensuring proper gitignore configuration for local state files.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to read deployment and function logs for troubleshooting purposes. This represents a standard surface for indirect prompt injection as logs may contain untrusted data, but it is necessary for the skill's primary function.
- Ingestion points: Deployment logs and function logs accessed via netlify logs or the dashboard (mentioned in references/cli-commands.md and references/deployment-patterns.md).
- Boundary markers: None present in the instructions for log data processing.
- Capability inventory: Shell command execution via the Netlify CLI (e.g., netlify deploy, netlify build) and file system access (reading netlify.toml).
- Sanitization: None described for external log content.
Audit Metadata