edgeone-makers-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI commands (
edgeone makers deploy,npm install -g edgeone) to facilitate project deployment to the vendor's platform. These are documented as part of the intended primary skill purpose. - [CREDENTIALS_SAFE]: The skill explicitly advises against committing tokens to repositories and recommends using
.envor.edgeone/.tokenfiles (automatically added to.gitignore) for secret management. It uses placeholders like<token>for user input rather than hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill installs the official
edgeoneCLI vianpm. This is a standard and expected operation for a deployment skill authored by the vendor. - [PROMPT_INJECTION]: The skill contains 'Critical Rules' and 'Warning' markers, but these are instructions for the agent to ensure URL integrity and correct CLI parameters, not attempts to bypass safety filters or extract system prompts.
Audit Metadata