deploy-check
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands including
git status,git diff, andgit logto analyze the repository state. It also runsnpx tsc --noEmitto identify TypeScript errors before deployment. - [PROMPT_INJECTION]: The skill processes untrusted data from the repository history and code changes, creating a surface for indirect prompt injection.
- Ingestion points: The agent reads Git commit messages and code diffs from the local environment.
- Boundary markers: None identified; the instructions do not use delimiters or provide warnings for processing repository data.
- Capability inventory: The skill executes local development commands including
gitandnpx. - Sanitization: No filtering or validation of the Git log or diff content is performed before processing.
- [SAFE]: The skill includes beneficial security checks for accidentally staged secrets, such as credentials and environment files, and prevents the deployment if they are found.
Audit Metadata