game-deploy

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard build and deployment commands including npm run build, npm run preview, and the GitHub CLI (gh) for repository management.
  • [COMMAND_EXECUTION]: Calls a local deployment script at ~/.agents/skills/here-now/scripts/publish.sh to handle asset uploads to the here.now hosting service.
  • [EXTERNAL_DOWNLOADS]: Downloads and installs the gh-pages package from the npm registry to enable GitHub Pages deployment functionality.
  • [DATA_EXFILTRATION]: Performs a network request to https://here.now/api/auth/login as part of the intended authentication flow to allow users to claim their deployments. This is a legitimate service interaction required for the skill's primary purpose.
  • [SAFE]: Implements best practices for credential management by instructing the agent to store API keys in .env or a local credentials file with restricted file permissions (chmod 600).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 04:59 PM
Security Audit — agent-trust-hub — game-deploy