here-now

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a shell script (publish.sh) to coordinate deployment, calling standard binaries like curl, jq, file, find, and shasum to generate file manifests and handle uploads.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with official API endpoints at https://here.now and references external documentation at https://here.now/docs to guide its deployment workflows.
  • [SAFE]: The skill implements several security best practices, including a safety guard that prevents sending API keys to non-default base URLs without an explicit override, and the use of restrictive file permissions (chmod 600) when storing local credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 10:00 PM
Security Audit — agent-trust-hub — here-now