public-url-hosting — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited public-url-hosting (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this to put a running service on the public internet from inside a Box: a web app, an API, a demo, or a long-lived endpoint. Box handles TLS, routing, and auth — no DNS, no certificates, no separate platform.
box_id="$(box new --no-auto-stop --json | jq -r 'select(.event == "ready") | .id')"
box ssh "$box_id" -- bash -s < ./deploy.sh # build + start app on 0.0.0.0:8080
box ssh "$box_id" -- "host 8080 --public --title 'my app'"
box ssh "$box_id" -- "host url 8080" # https://<box>-8080.on.ascii.devhost URLs are token-gated by default; --public makes them open. A dedicated IPv4 + full TCP/UDP means you can also point your own domain or host non-HTTP services.
--no-auto-stop keeps the host alive 24-7; persists across resume.curl -fsSL https://box.ascii.dev/install | sh, then box login "$BOX_API_KEY" --json.
EU-only; 100 active VMs soft cap. For multi-region CDN-grade hosting, use a dedicated host; Box is best for single-VM services, previews, and demos.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.