portaljs-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard build and deployment commands (
npm run build,curl,tar). These are within the expected scope for a deployment tool targeted at Next.js projects. - [CREDENTIALS_SAFE]: The skill manages authentication tokens by reading from the environment (
PORTALJS_TOKEN) or a local configuration file (~/.portaljs/credentials). It correctly specifies that the credentials file should have restrictive permissions (0600) to prevent unauthorized access by other users on the system. - [EXTERNAL_DOWNLOADS]: The skill references a canonical workflow hosted on Datopian's official GitHub repository (
github.com/datopian/portaljs). This is a trusted source consistent with the skill's author and purpose. - [DATA_EXPOSURE]: The skill includes a 'hygiene check' (
check-export) designed to prevent sensitive data or large binary files (like Git LFS pointers) from being accidentally included in the static export and uploaded to the hosting provider. - [DYNAMIC_CONTEXT_INJECTION]: No use of the
!command`` syntax was detected in the skill instructions.
Audit Metadata