proposal-generator
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to deploy files using the Netlify CLI and to start a local Python server for previewing proposals.
- [EXTERNAL_DOWNLOADS]: Fetches the Netlify CLI tool from the public NPM registry. Netlify is a recognized and well-known service.
- [PROMPT_INJECTION]: Processes external data such as client quotes and brand information. This ingestion of untrusted content constitutes an indirect prompt injection surface, though it is consistent with the skill's primary purpose.
- [DATA_EXFILTRATION]: Transfers generated HTML content to Netlify's servers as part of the intended deployment workflow.
Audit Metadata