vibecoding-deployment-auditor@2.3.21
VERIFIED· install onlyPublisher claims: "免费 AI 网站一键上线助手（内部标识：vibecoding-deployment-auditor）：适合国内用户与零基础小白，无需 Git、服务器、域名或复杂部署配置；面向 VibeCoding 生成的纯静态网站，适用于官方 Sites/ChatGPT Sites 上线不成功或不适用时，通过私有 ZIP 链路完成上线并验证公开 HTTPS 地址。支持 H5 小游戏、个人作品集、企业官网、活动落地页、数据可视化及浏览器直连公开 HTTPS API 的前端工具；最终产物必须可本地构建为含 index.html、可由 CDN/Nginx 直接提供的静态目录，不适用于需要自建后端、数据库、服务器运行时或远端安装/启动依赖的项目。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
https://f.devtool.uk/downloads/*.zipFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.- `.env`、密钥、Cookie、私钥、服务端配置混入发布物；Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.提交对象必须且仅能是已通过本 Skill 审计的最终静态发布 ZIP：仅含 `artifact-manifest.json`、`deployment-dossier.json` 和 `site/` 下可公开托管的页面资源。它不含源码仓库、`.git`、`node_modules`、`.env*`、密钥、Cookie、用户数据、脚本或服务端配置。ZIP 先发送至用户指定的私有上传端点，再由 `/deFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.- 上传内容只能是构建产物，绝不上传源码仓库、`.git`、`node_modules`、`.env*`、source map、锁文件、Docker/PM2 配置或脚本。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.