fw-publish

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local CLI tools including fdk, zip, unzip, and curl to manage the application packaging and deployment lifecycle within the developer's environment.
  • [EXTERNAL_DOWNLOADS]: It communicates with the Freshworks MCP server (https://mcp.freshworks.dev/mcp) to manage app listings, retrieve documentation, and obtain secure presigned URLs for application uploads.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local manifest.json and actions.json files. Ingestion points: SKILL.md. Boundary markers: Explicit user confirmation prompts and 'MANDATORY' prerequisite warnings. Capability inventory: Shell execution (fdk pack) and network upload tools. Sanitization: Enforcement of a clean fdk validate pass before any upload occurs.
  • [DYNAMIC_EXECUTION]: The skill uses bundled shell scripts (upload-app.sh, repack-app-zip.sh) to handle binary data and coordinate with vendor APIs, which is standard behavior for developer-focused publishing tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 09:36 PM