vps-deploy-golden-path
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
assets/deploy.sh.templatescript uses theevalcommand to execute build, migration, and restart operations. These commands are intended to be configured by the user within the script's configuration block and are standard for deployment automation. - [EXTERNAL_DOWNLOADS]: The template includes standard commands for fetching application dependencies from the npm registry using
npm ciornpm install. - [COMMAND_EXECUTION]: The script performs
git fetchandgit reset --hardto synchronize the deployment target with the remote repository, ensuring a clean and consistent state. - [SAFE]: The 'sentinel' mechanism involves touching a local file at
~/.deploy-sentinels/to track deployment success. This is a passive monitoring practice and does not involve malicious persistence or data exfiltration.
Audit Metadata