netlify-integration
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install official tools like the Netlify CLI and various development dependencies from well-known registries like npm. These resources originate from trusted organizations and well-known services.
- [COMMAND_EXECUTION]: Includes scripts such as
check_deployment.sh,setup_env_vars.sh, andtest_function_locally.shthat utilize the Netlify CLI to perform administrative tasks, including checking deployment status and setting environment variables. - [PROMPT_INJECTION]: The skill is designed to process untrusted external input from webhooks (e.g., SMS messages). This presents an indirect prompt injection surface where malicious data could influence downstream AI processing. The skill addresses this vulnerability by providing robust evidence and mitigation patterns: 1. Ingestion points: Webhook handlers in
SKILL.mdandassets/examples/webhook-function.tsread theevent.bodyof incoming requests. 2. Boundary markers: The skill explicitly recommends and provides code for signature validation headers (e.g.,telnyx-signature-ed25519). 3. Capability inventory: Functions utilizefetchfor triggering background tasks and the Supabase client for database persistence. 4. Sanitization: Recommends the use ofZodfor schema validation of incoming payloads in Quick Reference #10 to ensure data integrity.
Audit Metadata