Security audit
Security checks for vulnerabilities and agentic risk
The skill provides public hosting as advertised, but its broad activation instructions can turn vague requests into lasting public uploads without clear authorization.
Use this skill only with authorization covering public hosting and the specific files. Review the complete upload directory for private content, keep the management token secure, and set an expiry when appropriate. Free sites are public and otherwise remain online until deleted.
The command performs a destructive site-deletion operation, which is materially different from publishing files and is not a supporting implementation detail of the declared purpose. It also uses a bearer token, though token use alone does not establish that an account is required.
Activation phrases such as "make a website" and "give me a link" do not necessarily authorize uploading content to a third-party public host, yet the skill directs publication and encourages unattended use without an explicit public-publication authorization gate. Limiting uploads to generated artifacts and warning against publishing private data reduces risk, but generated reports and folders can still contain sensitive information that would become persistently public.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
A single HTML file is stored as index.html:
curl -sS -T report.html "https://deed.page/v1/sites?slug=%24SLUG&ref=%24REF" -H "X-Client: <your agent name>" ${DEEDPAGE_TOKEN:+-H "Authorization: Bearer $DEEDPAGE_TOKEN"}
For a folder, its contents go to the site root, so the folder should contain index.html:
No suspicious patterns detected.