teach-publish
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a main driver script (
publish.sh) that orchestrates the deployment. It uses common system utilities includingrsyncfor file synchronization andpython3for internal metadata processing. - [EXTERNAL_DOWNLOADS]: The skill invokes
npx wranglerto perform the deployment. This pattern involves downloading the official Cloudflare CLI tool from the NPM registry, which is an expected and safe operation for Cloudflare-related deployment tasks. - [DATA_EXFILTRATION]: The skill's primary function is to upload local files to the web (Cloudflare Pages). This behavior is documented and intentional. The script includes proactive security measures by explicitly using
rsync --excludeto prevent the upload of sensitive files such as.gitdirectories,MISSION.md,NOTES.md, andlearning-records. - [SAFE]: The Python script (
gen_portal.py) responsible for generating the course index useshtml.escape()when processing content from local HTML files, effectively mitigating potential cross-site scripting (XSS) risks in the generated portal pages.
Audit Metadata