appdeploy
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the AppDeploy API atapi-v2.appdeploy.aifor obtaining API keys and executing deployment commands. - [EXTERNAL_DOWNLOADS]: Fetches application templates, deployment instructions, and project metadata from the vendor's remote endpoint
https://api-v2.appdeploy.ai. - [CREDENTIALS_UNSAFE]: The setup process involves storing an API key in a local file named
.appdeploy. Although the skill correctly recommends adding this file to.gitignoreto prevent accidental commits, it establishes a pattern of storing sensitive credentials in plain text within the project directory.
Audit Metadata