fw-publish
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI tools including
fdk,zip,unzip, andcurlto manage the application packaging and deployment lifecycle within the developer's environment. - [EXTERNAL_DOWNLOADS]: It communicates with the Freshworks MCP server (
https://mcp.freshworks.dev/mcp) to manage app listings, retrieve documentation, and obtain secure presigned URLs for application uploads. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local
manifest.jsonandactions.jsonfiles. Ingestion points:SKILL.md. Boundary markers: Explicit user confirmation prompts and 'MANDATORY' prerequisite warnings. Capability inventory: Shell execution (fdk pack) and network upload tools. Sanitization: Enforcement of a cleanfdk validatepass before any upload occurs. - [DYNAMIC_EXECUTION]: The skill uses bundled shell scripts (
upload-app.sh,repack-app-zip.sh) to handle binary data and coordinate with vendor APIs, which is standard behavior for developer-focused publishing tools.
Audit Metadata