openpress-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard build and deployment commands such as
npm run build,npm run openpress:deploy, andnpx wrangler pages project create. These are expected for a deployment-focused skill and utilize standard CLI tools. - [EXTERNAL_DOWNLOADS]: The skill references Cloudflare-related tools and documentation (e.g., Cloudflare Pages and
wrangler). These are well-known technology services and the references are used for standard configuration and deployment workflows. - [DATA_EXPOSURE]: The skill explicitly instructs the agent to 'Keep secrets out of source files' and 'Do not write API tokens or secrets into open-press config, Markdown, design.md, or skill files.' It also suggests using
.envfiles for secret management, which is a standard safe practice. - [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration from
package.json. While this is an ingestion point for external data, the skill requires explicit user confirmation before executing any sensitive deployment actions based on this configuration, mitigating the risk of automated exploitation.
Audit Metadata