deploy-app
Warn
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The deployment scripts (
deploy-all.sh,deploy-backend.sh, anddeploy-frontend.sh) use theevalshell command to execute build and service restart instructions fetched fromproject.config.json. This pattern allows for arbitrary shell command execution based on the contents of the configuration file. - [CREDENTIALS_UNSAFE]: The skill manages Basic Authentication credentials stored in a secrets directory (
.cursor/.secrets/). These credentials are interpolated intocurlcommands, which could lead to exposure if the environment or the target site URL is compromised. - [COMMAND_EXECUTION]: The
deploy-all.shscript executessudo systemctl status, indicating that the skill expects or requires elevated privileges to monitor system services.
Audit Metadata