netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Netlify CLI and package managers. Specific commands include
npx netlify deploy,npx netlify status,npm install, andgit remote. These are standard tools for the described deployment purpose and the skill correctly notes when escalated permissions may be required for network access in sandboxed environments.- [EXTERNAL_DOWNLOADS]: The skill fetches the Netlify CLI vianpxfrom the official registry and installs project dependencies usingnpm. These references target well-known and trusted services (Netlify and NPM).- [PROMPT_INJECTION]: The skill processes untrusted project data which creates an indirect prompt injection surface. Ingestion points: The skill readspackage.json,netlify.toml, and Git remote URLs from the local environment to determine build settings. Boundary markers: No explicit delimiters or instructions to ignore embedded instructions are provided in the workflow. Capability inventory: The agent has capabilities for network operations (deployment) and dependency installation (npm install). Sanitization: No input validation or content filtering for the ingested configuration files is specified.
Audit Metadata