render-blueprints

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive instructional content for the Render infrastructure platform, focusing on authoring valid and secure configuration files.
  • [DATA_EXPOSURE_EXFILTRATION]: The skill explicitly warns against hardcoding sensitive information like connection strings or secrets. It promotes secure alternatives such as using fromDatabase, fromService, generateValue, and the sync: false flag to ensure secrets are managed via the Render platform rather than being stored in plain text in a repository.
  • [EXTERNAL_DOWNLOADS]: The skill references a JSON schema located at https://render.com/schema/render.yaml.json. This is an official domain owned by the vendor and is used for standard configuration validation and IDE support.
  • [COMMAND_EXECUTION]: The skill recommends using the official render CLI (render blueprints validate) for validating YAML configurations. This is a legitimate development workflow for infrastructure-as-code and does not involve unauthorized or hidden command execution.
  • [PROMPT_INJECTION]: While the skill uses strong instructional language such as "CRITICAL," it is used in the appropriate context of warning users about immutable infrastructure fields (fields that cannot be modified after a resource is created) and does not attempt to override the AI agent's core safety protocols.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:39 PM