deploy-verify
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by dynamically inferring its verification workflow from external, potentially untrusted project data.
- Ingestion points: Data is ingested from
wrangler.toml,git diff, andgit log(File: SKILL.md). - Boundary markers: No boundary markers or specific instructions are provided to isolate or ignore instructions that might be embedded in commit messages or configuration files.
- Capability inventory: The agent possesses capabilities to execute network requests (
curl), trigger deployments (wrangler), and run local tests (npm/bun). - Sanitization: There is no evidence of sanitization or validation for content extracted from the git history before it influences the agent's decision-making process.
- [COMMAND_EXECUTION]: The skill executes various shell commands to manage the deployment lifecycle.
- Evidence: The skill invokes
wrangler deploy,wrangler tail, andwrangler secret list. These are standard tools for the Cloudflare Workers ecosystem and are used here for their intended purpose. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to verify the state of the deployment.
- Evidence: The
curlcommand is used to hit endpoints on dynamically generated worker URLs to verify responses and headers.
Audit Metadata