here-now
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed to interact with the here.now service for hosting and file storage.
- [COMMAND_EXECUTION]: The skill uses shell scripts (
publish.shanddrive.sh) to perform its primary functions. These scripts are transparent and perform documented tasks such as file hashing, directory listing, and API interactions via curl. - [EXTERNAL_DOWNLOADS]: The skill communicates with the official
here.nowAPI to upload files and manage drive content. It also fetches updated documentation from the official site. - [CREDENTIALS_UNSAFE]: Authentication tokens are stored in
~/.herenow/credentials. The skill includes instructions and script logic to set restrictive file permissions (chmod 600) on this file to prevent unauthorized access. - [DATA_EXFILTRATION]: While the skill uploads user-specified files to a remote server, this is the core intended purpose of the service. The scripts include a safety check that prevents sending credentials to non-default domains unless explicitly configured by the user.
Audit Metadata