netlify-deploy

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
6
Flagged
6
Chunks
7
Flagged Files (6)
LICENSE.txtHIGH
78.3%

Malicious tool definition detected

Tool: LICENSE.txt [1/2] Description: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1.

Tool: LICENSE.txt [2/2] Description: this License.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: netlify-deploy description: Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish, or link a site/repo on Netlify, including preview and production deploys.

agents/openai.yamlHIGH
78.3%

Malicious tool definition detected

Tool: agents/openai.yaml Description: interface: display_name: "Netlify Deploy"

references/cli-commands.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/cli-commands.md Description: # Netlify CLI Commands Reference Quick reference for common Netlify CLI commands used in deployments.

references/deployment-patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/deployment-patterns.md Description: # Netlify Deployment Patterns Common deployment scenarios and best practices for the Netlify skill. ## Deployment Decision Tree ``` Is user authenticated? ├─ No → Run `netlify login` └─ Yes → Is site linked? ├─ No → Is it a Git repo?

references/netlify-toml.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/netlify-toml.md Description: # netlify.toml Configuration Reference Configuration file for Netlify builds and deployments.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
6
Files Flagged
6
Chunks Analyzed
7
Analyzed
Feb 21, 2026, 02:49 PM
Security Audit — runlayer — netlify-deploy