public-web-deploy
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is designed with a strong security posture, explicitly warning against the exposure of raw development servers (Vite, Next.js, etc.) and providing detailed hardening steps.
- [COMMAND_EXECUTION]: The skill uses shell commands to perform essential infrastructure tasks, such as configuring the UFW firewall, managing Nginx services via systemd, and conducting network diagnostics with
dig. These operations are well-documented and scoped to the task of web deployment. - [EXTERNAL_DOWNLOADS]: The instructions involve downloading and installing security software (
fail2ban) from official repositories and obtaining TLS certificates from Let's Encrypt (Certbot). These originate from trusted, well-known services and are standard for production deployments. - [SAFE]: Implements effective defensive measures including the denial of access to sensitive files (e.g.,
.env,.git,.sql), disabling directory indexing, and enforcing secure HTTP methods (GET/HEAD) for static content.
Audit Metadata