技能 brewpage-publish
📦
brewpage-publish
内容修订 r1 高风险 🌐 网络访问⚙️ 外部命令📁 文件系统访问
将页面和文件发布到 Brewpage
分享小型页面和文件可能需要配置托管。此技能可将文本、Markdown、JSON、文件或静态站点发布到 Brewpage，并返回一个 URL。
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "brewpage-publish" from https://skillstore.io/skills/kochetkov-ma-brewpage-publish.md and its manifest at https://skillstore.io/api/skills/kochetkov-ma-brewpage-publish/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“brewpage-publish”。 发布一条简短的 Markdown 公告，保留 15 天。
预期结果:
返回一个 Brewpage URL，并将所有者令牌保存在本地，而不是显示在聊天中。
正在使用“brewpage-publish”。 将 ./dist 作为带密码的站点上传。
预期结果:
- 该技能会报告所选入口文件和文件数量。
- 它会返回站点 URL，并说明所有者令牌已保存。
正在使用“brewpage-publish”。 分享一份 JSON 状态文档，保留一天。
预期结果:
该技能会将 JSON 发布到 Brewpage，并返回一个用于分享的临时链接。
安全审计
高风险v4 • 2026/7/5 打开版本化报告
Most static hits are Markdown formatting, documentation URLs, or protective exclusions rather than executable risk. Real issues remain in the Bash publish blocks, which interpolate user-controlled values before curl or zip execution and persist owner tokens in a workspace file.
3
已扫描文件
419
分析行数
31
复核项
0
已忽略误报
已确认安全问题 (4)
高
Environment file access
> **SECURITY:** The ownerToken MUST NEVER appear in conversation output. The bash blocks below handl
This line describes ownerToken handling and local history storage for deletion tokens. The .env text is protective, but token persistence creates a real sensitive-data risk.
高
Unescaped Shell Placeholder Interpolation
The publish snippets interpolate user-controlled content, paths, namespace, TTL, and entry values into Bash commands before execution. Values containing heredoc delimiters, quotes, or command substitutions can change the generated command.
The Bash snippets place placeholders directly inside heredocs, single-quoted JSON, double-quoted URLs, cd commands, and multipart arguments. Those values come from user input or selected paths.
高
Owner Tokens Persisted In Workspace History
The skill creates .claude/brewpage-history.md and appends owner tokens beside public URLs. These tokens allow deletion of published pages and can be exposed through accidental commits or later file reads.
The file path and echo commands are explicit, and each publish path appends the owner token when present. The skill warns not to print tokens but still stores them locally.
中
Pre-Built ZIP Upload Bypasses Secret Exclusions
Directory uploads exclude common secret and project files, but the ZIP upload path sends the supplied archive as-is. A ZIP containing credentials, source maps, or repository data would be uploaded without the same filtering.
The SKILL.md instructions describe ZIP files as an alternative input and the ZIP publish block uploads archive=@{zip_file_path}. The exclusion list is only shown for the directory auto-zip path.
能力复核项 (31)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Ruby/shell backtick execution
```bash
This range is an executable Bash publish block, not only Markdown formatting. It performs curl or archive operations using user-selected content and placeholders.
高
Ruby/shell backtick execution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | html |"
This line writes owner tokens into the local history file. The token is not printed, but it is still stored as sensitive data in the workspace.
高
Ruby/shell backtick execution
```bash
This range is an executable Bash publish block, not only Markdown formatting. It performs curl or archive operations using user-selected content and placeholders.
高
Ruby/shell backtick execution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | json |"
This line writes owner tokens into the local history file. The token is not printed, but it is still stored as sensitive data in the workspace.
高
Ruby/shell backtick execution
```bash
This range is an executable Bash publish block, not only Markdown formatting. It performs curl or archive operations using user-selected content and placeholders.
高
Ruby/shell backtick execution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | file |"
This line writes owner tokens into the local history file. The token is not printed, but it is still stored as sensitive data in the workspace.
高
Ruby/shell backtick execution
```bash
This range is an executable Bash publish block, not only Markdown formatting. It performs curl or archive operations using user-selected content and placeholders.
高
Ruby/shell backtick execution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | site ($F
This line writes owner tokens into the local history file. The token is not printed, but it is still stored as sensitive data in the workspace.
高
Ruby/shell backtick execution
```bash
This range is an executable Bash publish block, not only Markdown formatting. It performs curl or archive operations using user-selected content and placeholders.
高
Ruby/shell backtick execution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | site ($F
This line writes owner tokens into the local history file. The token is not printed, but it is still stored as sensitive data in the workspace.
高
Shell command substitution
CONTENT=$(cat <<'BREWPAGE_EOF'
User-provided page content is placed inside a shell heredoc before execution. Content containing the delimiter or shell syntax could alter the command block.
高
Shell command substitution
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/html?ns={ns}&ttl={days}&format=markdown" \
The curl command is constructed from user-controlled placeholders and then executed by Bash. This creates command-injection and unintended upload risk.
高
Shell command substitution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | html |"
The command appends owner tokens to a workspace history file. This intentionally stores sensitive deletion tokens at rest.
高
Shell command substitution
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/json?ns={ns}&ttl={days}" \
The JSON publish block inserts original_json inside a shell command. Quotes or shell metacharacters in user JSON can break the intended curl invocation.
高
Shell command substitution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | json |"
The command appends owner tokens to a workspace history file. This intentionally stores sensitive deletion tokens at rest.
高
Shell command substitution
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/files?ns={ns}&ttl={days}" \
A user-controlled path placeholder is inserted into a curl multipart argument. Unescaped shell metacharacters in the final path can alter the command.
高
Shell command substitution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | file |"
The command appends owner tokens to a workspace history file. This intentionally stores sensitive deletion tokens at rest.
高
Shell command substitution
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/sites?ns={ns}&ttl={days}&entry={entry}" \
The site upload command uses user-controlled namespace, TTL, entry, and archive values inside a shell command. Without strict validation, those values can affect execution.
高
Shell command substitution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | site ($F
The command appends owner tokens to a workspace history file. This intentionally stores sensitive deletion tokens at rest.
高
Shell command substitution
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/sites?ns={ns}&ttl={days}&entry={entry}" \
A user-controlled path placeholder is inserted into a curl multipart argument. Unescaped shell metacharacters in the final path can alter the command.
高
Shell command substitution
[ -n "$TOKEN" ] && echo "| $(date '+%Y-%m-%d %H:%M') | [$URL]($URL) | \`$TOKEN\` | {ttl}d | site ($F
The command appends owner tokens to a workspace history file. This intentionally stores sensitive deletion tokens at rest.
高
Template literal with command substitution
```bash
The fenced Bash publish block is intended to be executed and contains user-controlled placeholders plus command substitutions. The block can upload data and may be affected by unescaped input.
高
Template literal with command substitution
```bash
The fenced Bash publish block is intended to be executed and contains user-controlled placeholders plus command substitutions. The block can upload data and may be affected by unescaped input.
高
Template literal with command substitution
```bash
The fenced Bash publish block is intended to be executed and contains user-controlled placeholders plus command substitutions. The block can upload data and may be affected by unescaped input.
高
Template literal with command substitution
```bash
The fenced Bash publish block is intended to be executed and contains user-controlled placeholders plus command substitutions. The block can upload data and may be affected by unescaped input.
高
Template literal with command substitution
```bash
The fenced Bash publish block is intended to be executed and contains user-controlled placeholders plus command substitutions. The block can upload data and may be affected by unescaped input.
中
Hardcoded URL
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/html?ns={ns}&ttl={days}&format=markdown" \
This executable curl POST sends user-selected content to brewpage.app. The behavior is disclosed, but it is still a real external upload path.
中
Hardcoded URL
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/json?ns={ns}&ttl={days}" \
This executable curl POST sends user-selected content to brewpage.app. The behavior is disclosed, but it is still a real external upload path.
中
Hardcoded URL
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/files?ns={ns}&ttl={days}" \
This executable curl POST sends user-selected content to brewpage.app. The behavior is disclosed, but it is still a real external upload path.
中
Hardcoded URL
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/sites?ns={ns}&ttl={days}&entry={entry}" \
This executable curl POST sends user-selected content to brewpage.app. The behavior is disclosed, but it is still a real external upload path.
中
Hardcoded URL
RESPONSE=$(curl -s -X POST "https://brewpage.app/api/sites?ns={ns}&ttl={days}&entry={entry}" \
This executable curl POST sends user-selected content to brewpage.app. The behavior is disclosed, but it is still a real external upload path.
风险因素
🌐 网络访问 (14)
⚙️ 外部命令 (103)
SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:33 SKILL.md:38-41 SKILL.md:41-43 SKILL.md:43 SKILL.md:46 SKILL.md:47 SKILL.md:48-52 SKILL.md:52-58 SKILL.md:58-68 SKILL.md:68-71 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:78 SKILL.md:79-80 SKILL.md:80-86 SKILL.md:86-96 SKILL.md:96-99 SKILL.md:99-101 SKILL.md:101-104 SKILL.md:104 SKILL.md:105-106 SKILL.md:106-110 SKILL.md:110 SKILL.md:113-122 SKILL.md:122-123 SKILL.md:123-129 SKILL.md:129-131 SKILL.md:131-134 SKILL.md:134-152 SKILL.md:152-157 SKILL.md:157-160 SKILL.md:160-173 SKILL.md:173-178 SKILL.md:178-181 SKILL.md:181-193 SKILL.md:193-198 SKILL.md:198-201 SKILL.md:201-220 SKILL.md:220-225 SKILL.md:225-228 SKILL.md:228-243 SKILL.md:243-248 SKILL.md:248-252 SKILL.md:252-253 SKILL.md:253-256 SKILL.md:256-258 SKILL.md:258-259 SKILL.md:259-267 SKILL.md:267-271 SKILL.md:271-272 SKILL.md:272-274 SKILL.md:274-278 SKILL.md:278-279 SKILL.md:279 SKILL.md:280 SKILL.md:281-282 SKILL.md:282 SKILL.md:283 SKILL.md:284 SKILL.md:285 SKILL.md:286 SKILL.md:116 SKILL.md:136-139 SKILL.md:140 SKILL.md:143-146 SKILL.md:148 SKILL.md:149 SKILL.md:152 SKILL.md:164-167 SKILL.md:169 SKILL.md:170 SKILL.md:173 SKILL.md:185-187 SKILL.md:189 SKILL.md:190 SKILL.md:193 SKILL.md:205 SKILL.md:208-211 SKILL.md:214 SKILL.md:216 SKILL.md:217 SKILL.md:220 SKILL.md:232-235 SKILL.md:237 SKILL.md:239 SKILL.md:240 SKILL.md:243 SKILL.md:113-122 SKILL.md:134-152 SKILL.md:160-173 SKILL.md:181-193 SKILL.md:201-220 SKILL.md:228-243
📁 文件系统访问 (4)
审计者: codex 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/kochetkov-ma-brewpage-publish/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/kochetkov-ma-brewpage-publish?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/kochetkov-ma-brewpage-publish?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kochetkov-ma-brewpage-publish/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/kochetkov-ma-brewpage-publish.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
kochetkov-ma. (2026). brewpage-publish security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kochetkov-ma-brewpage-publish/audits/4BibTeX 引用
@techreport{kochetkov-ma-kochetkov-ma-brewpage-publish-2026,
author = {kochetkov-ma},
title = {brewpage-publish security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/kochetkov-ma-brewpage-publish/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "brewpage-publish security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "kochetkov-ma"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/kochetkov-ma-brewpage-publish/audits/4"
identifiers:
- type: other
value: "skillstore:kochetkov-ma-brewpage-publish:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
85
内容
67
社区
83
规范符合性
你能构建什么
分享静态预览
发布已构建的站点目录，并向评审人员发送临时 URL。
发布文档草稿
无需设置服务器，即可将 Markdown 笔记或报告转换为托管页面。
托管数据样本
上传 JSON 对象或文件，并分享用于短期协作的直接链接。
试试这些提示
发布笔记
将这段文本发布到 Brewpage，使用默认 TTL。在使用公共命名空间或密码之前先询问我。
分享 Markdown 文件
将 report.md 发布到 Brewpage，保留 7 天。使用描述性命名空间，并询问我是否需要密码保护。
托管已构建站点
发布 ./dist 中已构建的站点，并使用 index.html 作为入口文件。上传前显示文件数量并使用密码。
发布并支持清理
将 ./release-site 作为 Brewpage 站点发布 3 天，确认归档排除了密钥，保存所有者令牌，并总结删除步骤。
最佳实践
- 在将文件和目录发布到 Brewpage 之前先进行检查。
- 对草稿、私有文件和评审链接使用密码保护。
- 保护 owner-token 历史文件，并避免将其纳入版本控制。
避免
- 发布源代码树，而不是已构建的静态输出。
- 上传尚未检查密钥的 ZIP 归档。
- 分享所有者令牌或提交历史文件。
常见问题
此技能可以发布什么？
它可以将文本、Markdown、JSON、单个文件、目录和 ZIP 归档发布到 Brewpage。
它需要 Brewpage 账户吗？
README 表明发布无需注册。
已发布内容是公开的吗？
默认情况下，内容可能是公开的。当内容是私有或未完成时，请使用密码保护。
所有者令牌存储在哪里？
该技能会将所有者令牌保存在 .claude/brewpage-history.md 中，以便用户之后删除已发布页面。
需要哪些命令行工具？
该技能使用 Bash，以及 curl、jq、zip、tr、head、mktemp 和 file 等工具。
应如何处理 ZIP 上传？
上传前请检查 ZIP 归档，因为预构建的 ZIP 文件会按原样发送。
开发者详情
作者
kochetkov-ma许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
a25199bc7d6b82598536822d1738eb5d5f54025b
维护新鲜度
2026/7/18
使用量
1 次下载 · 0 次浏览