dockerize-and-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/deploy.shscript utilizesevalto execute theMIGRATIONS_CMDenvironment variable. While this is a common and intended feature for running database migrations during deployment, it involves executing content provided via the environment. - [DYNAMIC_EXECUTION]: The
scripts/preflight.shscript sources a local.env.prodfile using thesourcecommand to load environment variables. This is a standard functional pattern for deployment tools to validate required configuration before proceeding. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local data through several ingestion points.
- Ingestion points:
scripts/preflight.shreads and parses.env.prod,Dockerfile, anddocker-compose.prod.yml. - Boundary markers: The scripts do not use explicit delimiters or "ignore instructions" markers when reading these files, relying on standard shell parsing.
- Capability inventory: The skill possesses significant capabilities, including full shell execution (
bash), container management (docker,docker compose), and network requests (curl). - Sanitization: Validation is performed via
docker compose config --quietand tool availability checks, though user-defined environment variables used inevalare not sanitized.
Audit Metadata