one-deployment
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for deploying applications using the 'One' framework, aligning with the author's identity and documentation.
- [SAFE]: Includes documentation for a built-in security scanning feature designed to detect and block leaked secrets (API keys for OpenAI, Anthropic, Stripe, etc.) during the build process, which is a defensive security feature.
- [SAFE]: All external references target well-known services (Vercel, Cloudflare, Expo, GitHub Pages) or the official framework documentation (onestack.dev).
- [SAFE]: Commands like
one build,one serve,wrangler deploy, andvercel deployare standard tools for the described deployment workflows and do not exhibit malicious behavior. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized access to sensitive files was found.
Audit Metadata