Is deploy safe to install?

SaferSkills independently audited deploy (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/operations/deploy/SKILL.md · 1 file

skills/operations/deploy/SKILL.md1.7 KB · Markdown

name: deploy

description: Deploy to production. Runs pre-deploy safety checks, pushes to trigger CI/CD, and monitors the deployment.

disable-model-invocation: true

allowed-tools: Bash(git *), Bash(gh *), Bash(curl *), Bash(pytest *), Bash(ruff *), Bash(mypy *), Bash(npm *)

Deploy to Production

WARNING: This deploys to the live production environment.

Pre-Deploy Checklist

Before pushing, verify ALL of these pass:

Tests pass: Run the full test suite
Lint clean: Run the project's linter with no errors
Types clean: Run the type checker with no errors (if applicable)
On deploy branch: git branch --show-current must be the deploy branch (usually main)
Working tree clean: git status shows no uncommitted changes
Up to date: git pull origin main has no conflicts

If ANY check fails, stop and report the issue. Do NOT proceed with deployment.

Deploy

Push to the deploy branch to trigger the CI/CD pipeline:

git push origin main

Monitor

Watch CI: gh run list --limit 1 -- wait for the run to complete
Check run status: gh run view <run-id> -- verify all jobs pass
Health check: After CI completes, wait 60 seconds then:

   curl -sf https://{PRODUCTION_URL}/health

Expected healthy response includes a status field indicating the service is running

If Deployment Fails

Check CI logs: gh run view <run-id> --log-failed
If the app is down, refer to the project's runbook for rollback procedures
Quick rollback: revert the commit and push again

Reference

Check the project's deploy/ directory or ops documentation for full operational procedures.

deploy— agent skill

Is deploy safe to install?

Deploy to Production

Pre-Deploy Checklist

Deploy

Monitor

If Deployment Fails

Reference

Audit the pieces. Scan the whole. Decide.