build-and-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard build and deployment commands including
yarn install,yarn build,vercel build, andnetlify deploy. These are consistent with the skill's stated purpose of project deployment. - [CREDENTIALS_UNSAFE]: The skill provides instructions for managing environment variables. It reads from a
.env.exampletemplate and populates a.envfile using values from the current shell environment. It correctly references sensitive tokens likeVERCEL_TOKENandOPENAI_API_KEYvia environment variables rather than hardcoding them. - [EXTERNAL_DOWNLOADS]: The skill utilizes well-known services and their CLI tools (Vercel, Netlify, and Yarn/NPM). These are trusted platforms for web development and deployment.
- [DATA_EXFILTRATION]: While the skill transfers environment variables to Vercel and Netlify platforms, this is a core requirement for the deployment process and is directed to the user's own project environments on those platforms.
Audit Metadata