render-blueprints
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructional content for the Render infrastructure platform, focusing on authoring valid and secure configuration files.
- [DATA_EXPOSURE_EXFILTRATION]: The skill explicitly warns against hardcoding sensitive information like connection strings or secrets. It promotes secure alternatives such as using
fromDatabase,fromService,generateValue, and thesync: falseflag to ensure secrets are managed via the Render platform rather than being stored in plain text in a repository. - [EXTERNAL_DOWNLOADS]: The skill references a JSON schema located at
https://render.com/schema/render.yaml.json. This is an official domain owned by the vendor and is used for standard configuration validation and IDE support. - [COMMAND_EXECUTION]: The skill recommends using the official
renderCLI (render blueprints validate) for validating YAML configurations. This is a legitimate development workflow for infrastructure-as-code and does not involve unauthorized or hidden command execution. - [PROMPT_INJECTION]: While the skill uses strong instructional language such as "CRITICAL," it is used in the appropriate context of warning users about immutable infrastructure fields (fields that cannot be modified after a resource is created) and does not attempt to override the AI agent's core safety protocols.
Audit Metadata