Security risk report for @forgecat/openai_skills_netlify-deploy v0.0.11
Source Integrity
Low
Profile declares origin as OpenAI's official skills repository (github.com/openai/skills) with specific commit hash and Apache-2.0 license.
Static scanner assigned low risk; content is consistent with a legitimate, curated Netlify deployment skill from a known source.
No evidence of supply-chain poisoning, typosquatted dependencies, or malicious package substitution.
Agent Intent
Low
Content describes legitimate Netlify CLI workflows (login, link, deploy) without injecting hidden instructions or role hijacking.
No directives to read credentials from ~/.ssh, ~/.aws, .env, or exfiltrate data to external hosts.
No system prompt leakage, guidance poisoning, or instructions to hide/deny the skill's own instructions; all documentation is transparent and educational.
Details
Evidence
Authentication section explicitly guides user through browser OAuth or API key setup—standard practice, not manipulation.
Deployment workflow is straightforward: verify auth → link site → install deps → deploy; no obfuscation or malicious side effects.
Error handling and troubleshooting sections provide transparent guidance for common issues.
Permissions
Low
Skill invokes Netlify CLI (npx netlify) for its stated purpose: deployment, site linking, and authentication—all aligned with the profile description.
No shell execution, file deletion, or filesystem mutation beyond what is necessary for Netlify operations (reading package.json, netlify.toml, build output).
Network access is scoped to Netlify services and GitHub (for Git remote detection), not arbitrary external hosts.
Details
Evidence
Commands are limited to: netlify login, netlify status, netlify link, netlify init, netlify deploy, netlify env:set—all legitimate Netlify CLI operations.
No alwaysApply=true rules with broad globs; no excessive subagent or web_fetch directives.
Deployment requires escalated network access (noted in prerequisites), which is appropriate for uploading to Netlify's servers.
MCP Risk
Low
No MCP servers are declared in this profile; the skill relies on the Netlify CLI (npx netlify), which is a well-known, publicly maintained tool.
Netlify CLI is distributed via npm and is widely used in production; no hidden instructions or arbitrary binary execution.
Network and filesystem access is scoped to Netlify operations and the local project directory.
Details
Evidence
Profile explicitly states 'Dependencies: None' and does not define custom MCP server configurations.
All tool invocations are via standard npm/npx commands to the official Netlify CLI package.
No references to unknown binaries, shell scripts, or unrestricted filesystem/network access.
ForgeCat