here-now
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script (
publish.sh) to coordinate deployment, calling standard binaries likecurl,jq,file,find, andshasumto generate file manifests and handle uploads. - [EXTERNAL_DOWNLOADS]: The skill communicates with official API endpoints at
https://here.nowand references external documentation athttps://here.now/docsto guide its deployment workflows. - [SAFE]: The skill implements several security best practices, including a safety guard that prevents sending API keys to non-default base URLs without an explicit override, and the use of restrictive file permissions (
chmod 600) when storing local credentials.
Audit Metadata