portaljs-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard build and deployment commands (npm run build, curl, tar). These are within the expected scope for a deployment tool targeted at Next.js projects.
  • [CREDENTIALS_SAFE]: The skill manages authentication tokens by reading from the environment (PORTALJS_TOKEN) or a local configuration file (~/.portaljs/credentials). It correctly specifies that the credentials file should have restrictive permissions (0600) to prevent unauthorized access by other users on the system.
  • [EXTERNAL_DOWNLOADS]: The skill references a canonical workflow hosted on Datopian's official GitHub repository (github.com/datopian/portaljs). This is a trusted source consistent with the skill's author and purpose.
  • [DATA_EXPOSURE]: The skill includes a 'hygiene check' (check-export) designed to prevent sensitive data or large binary files (like Git LFS pointers) from being accidentally included in the static export and uploaded to the hosting provider.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of the !command`` syntax was detected in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 04:57 AM