·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 9. Classified findings closed: 4. Classified findings remaining: 5. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 20.
1
7
1
5
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/cli-commands.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Closed | |
references/cli-commands.md | Excessive Agency & Rogue Autonomy | — | Medium | Closed | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Medium | Open | |
references/cli-commands.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/netlify-toml.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/netlify-toml.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/deployment-patterns.md | Supply Chain & Install-Time Trust | — | Medium | Open |
9 findings
Deploy web projects to Netlify using the Netlify CLI with intelligent detection of project configuration and deployment context.
This skill automates Netlify deployments by:
sandbox_permissions=require_escalated.The skill uses the pre-authenticated Netlify CLI approach:
npx netlify statusnpx netlify loginAuthentication uses either:
netlify login opens browser for authenticationNETLIFY_AUTH_TOKEN environment variableCheck if the user is logged into Netlify:
Expected output patterns:
If not authenticated, guide the user:
This opens a browser window for OAuth authentication. Wait for user to complete login, then verify with netlify status again.
Alternative: API Key authentication
If browser authentication isn't available, users can set:
Tokens can be generated at: https://app.netlify.com/user/applications#personal-access-tokens
From netlify status output, determine:
If already linked → Skip to step 4
If not linked, attempt to link by Git remote:
If link fails (site doesn't exist on Netlify):
This guides user through:
Before deploying, ensure project dependencies are installed:
Choose deployment type based on context:
Preview/Draft Deploy (default for existing sites):
This creates a deploy preview with a unique URL for testing.
Production Deploy (for new sites or explicit production deployments):
This deploys to the live production URL.
Deployment process:
After deployment, report to user:
netlify open to view site or dashboardIf a netlify.toml file exists, the CLI uses it automatically. If not, the CLI will prompt for:
npm run build, next builddist, build, .nextCommon framework defaults:
npm run build, publish .nextnpm run build, publish distThe skill should detect framework from package.json if possible and suggest appropriate settings.
Common issues and solutions:
"Not logged in"
→ Run npx netlify login
"No site linked"
→ Run npx netlify link or npx netlify init
"Build failed" → Check build command and publish directory in netlify.toml or CLI prompts → Verify dependencies are installed → Review build logs for specific errors
"Publish directory not found" → Verify build command ran successfully → Check publish directory path is correct
If deployment fails due to network issues (timeouts, DNS errors, connection resets), rerun the deploy with escalated permissions (use sandbox_permissions=require_escalated). The deploy requires escalated network access when sandbox networking blocks outbound requests.
Example guidance to the user:
For secrets and configuration:
process.env.VARIABLE_NAMEnetlify deploy (no --prod) first to test before productionnetlify open to view site in Netlify dashboardnetlify logs to view function logs (if using Netlify Functions)netlify dev for local development with Netlify FunctionsGet started with chainctlchainctl skill install public/openai/netlify-deploy:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/openai/skills/.curated/netlify-deploy:latest
Apache-2.0
HARDENING.md
LICENSE
SKILL.md
agents/openai.yaml
assets/netlify-small.svg
assets/netlify.png
references/cli-commands.md
references/deployment-patterns.md
references/netlify-toml.md