brewpage-publish

The skill is a legitimate publishing tool for brewpage.app. All network requests target the documented brewpage.app API endpoints. External commands use standard tools (curl, jq, zip, mktemp) for content upload. The skill implements security safeguards: it excludes .env, .git, node_modules, and other sensitive paths from site uploads, never prints owner tokens in conversation, and stores them in a private file. The static scanner flagged many false positives because the skill's core function inherently requires network access and command execution. No malicious intent detected.