# Publish and Manage ShareOne Links

Sharing pages and documents securely can require several tools and manual steps. This skill publishes content and manages ShareOne links from one workflow.

## Install

```bash
npx skillstore add sudoprivacy/shareone
```

## Metadata

- Status: approved
- Slug: sudoprivacy-shareone
- Version: 1.2.10
- Author version: 1.2.10
- Skillstore revision: r2
- Version status: valid
- Tree hash: 4a1e9c87e868f6cb9cd775b67b8367a74bc9a751a083d69dac735b6c1032ff42
- Author: sudoprivacy
- GitHub username: sudoprivacy
- License: MIT
- Repository: https://github.com/sudoprivacy/shareone-skill/tree/df96cc7c4d602c816b6a50704e840b8224a501ad/
- Ref: 4a1d5a3cacc2dca08f354afcc67d19c7cd5c5ed4
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, env\_access, scripts
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/sudoprivacy-shareone
- Manifest: https://skillstore.pages.dev/api/skills/sudoprivacy-shareone/manifest

## Capabilities

- Publishes local HTML, Markdown, and text files as ShareOne pages.
- Uploads PDF, Word, and PowerPoint documents through the binary file workflow.
- Sets passwords, watermarks, custom slugs, comments, and page data options.
- Downloads shared content and refreshes pages linked to supported remote sources.
- Lists, replies to, resolves, and dismisses review comments.
- Adds, removes, and lists collaborators for owned shares.

## Use Cases

- Share a project page: Publish an HTML or Markdown project update with a stable link and optional access controls.
- Distribute protected documents: Upload a report or presentation with a password, watermark, or custom link name.
- Process review feedback: Read page comments, update the existing share, reply, and close completed feedback threads.

## Prompt Templates

### Publish a page

```
Publish [file path] to ShareOne and return the generated link.
```

### Protect a document

```
Upload [document path] to ShareOne with password [password] and watermark [watermark].
```

### Update link settings

```
Update [ShareOne link] to use slug [slug], enable comments, and preserve its content.
```

### Complete a review cycle

```
Review unresolved comments on [ShareOne link], apply approved changes, update the same link, and reply to each thread.
```

## Limitations

- Owner actions require a ShareOne API key and network access.
- Published content is sent to an external ShareOne service.
- Binary document content cannot be updated in place through the provided publishing script.
- Remote publishing depends on the service allowlist and source availability.

## Best Practices

- Confirm the target share before destructive actions or content updates.
- Use passwords and watermarks only when the user supplies the required values.
- Keep API keys in managed secrets or restricted credential files.

## Anti Patterns

- Do not publish sensitive content to a public link without explicit approval.
- Do not pass credentials or authenticated requests to untrusted base URLs.
- Do not create a new link when the user asked to update an existing share.

## Security Audit

- Audited at: 2026-08-17T05:52:28.818\+00:00
- Summary: The audit confirmed remote pipe-to-shell execution, unsafe filename insertion into HTML, transcript exposure of guest keys, and authenticated requests to caller-selected origins. Most scanner matches are false positives from documentation, JavaScript template literals, loopback tests, and expected CLI file or network operations. No prompt injection or obfuscated payload evidence was found. Static review was capped at 400/531 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

## Stats

- Views: 110
- Downloads: 12
- Favorites: 2
- Popularity score: 0