netlify-frameworks
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a project template from a well-known service's official GitHub repository. Evidence:
https://github.com/netlify/hydrogen-templateused for initializing Hydrogen projects. - [COMMAND_EXECUTION]: Provides instructions for standard development tools including
npm,npx, andnetlify-cli. Evidence: Use of package management and deployment commands throughout the guides. - [CREDENTIALS_UNSAFE]: The skill includes explicit defensive guidance to prevent data exposure. Evidence: Instructions warning against using client-side prefixes (e.g.,
NEXT_PUBLIC_,VITE_) for secrets. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing untrusted user project data as part of its deployment automation workflow. 1. Ingestion points: Analysis of
package.json,netlify.toml, and various framework configuration files (e.g.,next.config.js,astro.config.mjs). 2. Boundary markers: Explicit instructions to verify versions manually before pinning dependencies. 3. Capability inventory: Shell execution for builds and file system writes for configuration updates. 4. Sanitization: The skill relies on standard framework build chains and does not implement custom sanitization for project files.
Audit Metadata