deployment-engineer
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool and local Python scripts (scripts/generate_deploy.py,scripts/validate_deploy.py) to automate tasks. This is expected behavior for a deployment engineering skill. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface through its artifact generation process. User-supplied strings are written to a markdown file without escaping.
- Ingestion points: The
--name,--env, and--ownerarguments inscripts/generate_deploy.pyallow user input to be included in generated files. - Boundary markers: The generated
deploy-plan.mddoes not use specific delimiters or instructions to prevent the agent from following embedded commands if it later reads the file. - Capability inventory: The skill possesses
Read,Write,Edit, andBashtools as defined inSKILL.md. - Sanitization: No sanitization or validation is performed on the inputs before they are written to the deployment plan.
Audit Metadata