deployment
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality guidance on secure deployment workflows, including containerization best practices, monorepo management, and verifiable releases.
- [CREDENTIALS_UNSAFE]: The skill correctly identifies the risks of committing sensitive information and provides instructions to use environment variables and secret stores (e.g., using GitHub Secrets placeholders like ${{ secrets.CLOUDFLARE_API_TOKEN }}).
- [EXTERNAL_DOWNLOADS]: All external tools and services mentioned (Cloudflare, Vercel, Netlify, Clerk, Supabase, Sigstore) are well-known and trusted technology providers. The skill follows recommended usage patterns for these services.
- [COMMAND_EXECUTION]: The provided commands for Docker builds, npm publishing, and artifact signing are appropriate and standard for the skill's stated purpose of managing deployments.
- [PRIVILEGE_ESCALATION]: Security best practices are followed, specifically recommending the use of a non-root 'node' user in Docker environments to minimize potential attack surfaces.
Audit Metadata