portfolio
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a workflow for generating site content and deploying it to the build.host infrastructure using established API patterns.
- [DATA_EXPOSURE]: The skill references a sensitive configuration file path at
~/.build-host/credentials.json. However, this is the standard local configuration directory for the build.host service, and the instructions emphasize that these credentials should be used for authentication rather than being shared or hardcoded. - [SAFE]: The operating procedure includes explicit safety rules that prohibit printing API keys, OAuth tokens, or secrets to the console or logs, demonstrating a security-conscious design.
- [SAFE]: The skill requires confirmation for destructive actions, such as deleting projects or replacing domains, which prevents accidental data loss.
Audit Metadata