teach-publish

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a main driver script (publish.sh) that orchestrates the deployment. It uses common system utilities including rsync for file synchronization and python3 for internal metadata processing.
  • [EXTERNAL_DOWNLOADS]: The skill invokes npx wrangler to perform the deployment. This pattern involves downloading the official Cloudflare CLI tool from the NPM registry, which is an expected and safe operation for Cloudflare-related deployment tasks.
  • [DATA_EXFILTRATION]: The skill's primary function is to upload local files to the web (Cloudflare Pages). This behavior is documented and intentional. The script includes proactive security measures by explicitly using rsync --exclude to prevent the upload of sensitive files such as .git directories, MISSION.md, NOTES.md, and learning-records.
  • [SAFE]: The Python script (gen_portal.py) responsible for generating the course index uses html.escape() when processing content from local HTML files, effectively mitigating potential cross-site scripting (XSS) risks in the generated portal pages.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 08:20 AM