cloudbase-declarative-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
deployBuildtool is designed to execute local shell commands (such asbuildCommandandinstallCommand) defined within the user'scloudbasercconfiguration file. While this is the primary and intended function of a deployment tool, it involves executing arbitrary strings provided in the project workspace. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local filesystem, including
cloudbaserc(JSON/YAML/JS) and.envfiles. This creates a surface where malicious configuration could attempt to influence the agent's behavior. This risk is mitigated by explicit schema validation against the official CloudBase schema and mandatory user confirmation steps (confirm=true). - [DYNAMIC_EXECUTION]: The skill supports
cloudbaserc.jsas a configuration format. Parsing this file requires executing JavaScript code within the local environment to resolve the exported configuration object.
Audit Metadata