netlify-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Netlify CLI and package managers. Specific commands include npx netlify deploy, npx netlify status, npm install, and git remote. These are standard tools for the described deployment purpose and the skill correctly notes when escalated permissions may be required for network access in sandboxed environments.- [EXTERNAL_DOWNLOADS]: The skill fetches the Netlify CLI via npx from the official registry and installs project dependencies using npm. These references target well-known and trusted services (Netlify and NPM).- [PROMPT_INJECTION]: The skill processes untrusted project data which creates an indirect prompt injection surface. Ingestion points: The skill reads package.json, netlify.toml, and Git remote URLs from the local environment to determine build settings. Boundary markers: No explicit delimiters or instructions to ignore embedded instructions are provided in the workflow. Capability inventory: The agent has capabilities for network operations (deployment) and dependency installation (npm install). Sanitization: No input validation or content filtering for the ingested configuration files is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 12:00 AM
Security Audit — agent-trust-hub — netlify-deploy