documenso-deploy-integration

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill requests access to Bash(docker:) and Bash(kubectl:) tools. These permissions are necessary for the skill's primary function of deploying containerized applications and managing Kubernetes resources.
  • [EXTERNAL_DOWNLOADS]: The Dockerfile and deployment scripts perform standard dependency installations using npm ci. These are routine operations for building Node.js applications and do not involve untrusted remote code execution.
  • [CREDENTIALS_UNSAFE]: The skill correctly uses environment variable placeholders and references to secure secret stores (Kubernetes Secrets, AWS SSM) rather than hardcoding sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 01:17 AM