skills/heredotnow/skill/here-now/Gen Agent Trust Hub

here-now

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed to interact with the here.now service for hosting and file storage.
  • [COMMAND_EXECUTION]: The skill uses shell scripts (publish.sh and drive.sh) to perform its primary functions. These scripts are transparent and perform documented tasks such as file hashing, directory listing, and API interactions via curl.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the official here.now API to upload files and manage drive content. It also fetches updated documentation from the official site.
  • [CREDENTIALS_UNSAFE]: Authentication tokens are stored in ~/.herenow/credentials. The skill includes instructions and script logic to set restrictive file permissions (chmod 600) on this file to prevent unauthorized access.
  • [DATA_EXFILTRATION]: While the skill uploads user-specified files to a remote server, this is the core intended purpose of the service. The scripts include a safety check that prevents sending credentials to non-default domains unless explicitly configured by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:27 AM