static-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a secure credential management flow by fetching temporary Cloudflare API tokens from an internal vault at runtime using a scoped token, avoiding hardcoded secrets or cleartext transmission.
- [SAFE]: Deployment operations utilize Cloudflare's official Wrangler CLI (via npx), a trusted tool for Cloudflare Pages deployments.
- [SAFE]: Network activity is limited to authorized domains: the Cloudflare API (api.cloudflare.com) and the vendor's (nexu-io) management APIs for artifact recording and domain verification.
- [SAFE]: The scripts use standard shell and Node.js patterns for JSON processing and session lookup, ensuring compatibility without introducing risky execution vectors.
Audit Metadata