valet-publish
Publish files, folders, and artifacts to the web. Static hosting for HTML sites, images, PDFs, reports, dashboards, and any file type. Use when asked to publish, host, upload, serve, or share work at a live URL. Also use to propose a rendered page when a report, comparison, chart, design document...
Install this skill
or
40/100
Security score
The valet-publish skill was audited on Aug 18, 2026 and we found 4 security issues across 4 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
high line 121
Piping content to sh shell
SourceSKILL.md
| 119 | |
| 120 | ```sh |
| 121 | curl -fsSL https://valet.dev/install.sh | sh |
| 122 | ``` |
| 123 |
medium line 121
Curl to non-GitHub URL
SourceSKILL.md
| 119 | |
| 120 | ```sh |
| 121 | curl -fsSL https://valet.dev/install.sh | sh |
| 122 | ``` |
| 123 |
critical line 932
Instruction to extract credentials
SourceSKILL.md
| 930 | configuration, which is exactly what `git add .` sweeps up. |
| 931 | |
| 932 | You never need to read the token yourself — every command above finds |
| 933 | it. Do not print the file, and do not copy the token into a message, a |
| 934 | commit, or an issue. |
high line 121
Curl pipe to interpreter
SourceSKILL.md
| 119 | |
| 120 | ```sh |
| 121 | curl -fsSL https://valet.dev/install.sh | sh |
| 122 | ``` |
| 123 |
Scanned on Aug 18, 2026
View Security Dashboard