netlify-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill invokes the Netlify CLI and package managers to perform deployments. It is important to ensure that the project being deployed contains trusted build scripts, as these commands are executed during the deployment process.
- [Escalated Network Access]: Instructions are provided for the agent to request escalated permissions if network connectivity to Netlify's APIs is restricted. This is a legitimate requirement for a skill whose primary function is interacting with a remote hosting provider.
- [Indirect Prompt Injection Surface]: The skill ingests data from local project files to automate the workflow. (1) Ingestion points: package.json, netlify.toml, and git remote metadata in SKILL.md. (2) Boundary markers: Not explicitly defined in instructions. (3) Capability inventory: Includes shell command execution (npm, npx, git) and network access. (4) Sanitization: The skill relies on standard CLI tool behavior for processing configuration.
- [External Dependency Retrieval]: The skill utilizes
npxto run the Netlify CLI, which may involve downloading the package from the official registry if it is not already cached. This is a standard practice for maintaining up-to-date deployment tools from a well-known provider.
Audit Metadata