render-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs users to install the Render CLI by piping a remote shell script directly to the command line. Evidence:
curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | shinSKILL.md. This resource originates from the author's official GitHub repository and is a standard installation method for the platform's tooling. - [COMMAND_EXECUTION]: The instructions involve executing local shell commands to verify system state and prerequisites. Evidence: Commands such as
git remote -v,render --version, andrender whoami -o jsonare used to ensure the environment is correctly configured for deployment. - [INDIRECT_PROMPT_INJECTION]: The skill performs codebase analysis to generate deployment configurations, which constitutes a data ingestion surface. 1. Ingestion points: The agent reads repository files like
package.json,requirements.txt, andgo.mod(referenced inSKILL.mdandreferences/codebase-analysis.md). 2. Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided during the analysis phase. 3. Capability inventory: The skill can write configuration files (render.yaml), invoke platform-specific MCP tools (e.g.,create_web_service), and execute shell commands for status verification. 4. Sanitization: The instructions do not specify sanitization or filtering of codebase content prior to its use in generating the deployment Blueprint.
Audit Metadata