deploy-prototype

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled Python script (scripts/protolab.py) to perform its core functions. This script is written using only Python standard libraries and does not invoke external shell commands or untrusted binaries.\n- [DATA_EXFILTRATION]: The skill is designed to transmit user-selected files to a remote hosting service. This intended behavior is protected by strict operational guidelines requiring the agent to present a full deployment plan (including target URL and overwrite status) and obtain explicit user consent before proceeding with the network transmission.\n- [EXTERNAL_DOWNLOADS]: The documentation neutrally references the author's official GitHub repository (github.com/birdsigh/ProtoLab) for users who need to set up the corresponding server-side component.\n- [SAFE]: The script follows security best practices, such as applying 0o600 permissions (read/write by owner only) to its configuration file which stores API tokens, and excluding hidden system files (e.g., .DS_Store, .gitignore) from being bundled in deployments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 03:13 PM
Security Audit — agent-trust-hub — deploy-prototype