hostnsoft-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes common shell utilities including tar to archive project files and curl to interact with the Hostnsoft deployment API. These operations are essential for the skill's stated purpose of automating application deployment.
  • [DATA_EXFILTRATION]: The skill is designed to transmit application source code to https://ship.hostnsoft.com/apps. This transmission is the core function of the deployment tool and targets a domain consistent with the skill's identity.
  • [CREDENTIALS_UNSAFE]: The skill handles authentication via a HOSTNSOFT_TOKEN environment variable and provides instructions for users to set this up manually. It also checks a conventional local credential file path at ~/.hostnsoft/credentials, which is standard for CLI-driven deployment workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 04:54 AM