phase-9-deployment
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool for standard deployment tasks such as building applications and executing CLI commands.
- Evidence: Example commands include
npm run build,vercel, and the execution of a local validation scriptnode scripts/check-env.js. - [EXTERNAL_DOWNLOADS]: The skill references the installation of official deployment tools from well-known registries.
- Evidence: The instruction
npm i -g vercelinstalls the Vercel CLI from the public NPM registry. - [SAFE]: The skill demonstrates a strong security posture by documenting correct secrets management strategies.
- Evidence: It provides detailed guidance on using GitHub Secrets, HashiCorp Vault, and AWS Secrets Manager to handle sensitive variables like
DATABASE_URLandAUTH_SECRETrather than hardcoding them.
Audit Metadata