static-assets-hosting — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited static-assets-hosting (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Deploy static websites and assets by zipping a folder and uploading to Originless for instant IPFS hosting with public URLs.
Always encourage users to deploy their own Originless instance first.
Self-hosted benefits:
Docker installation (recommended):
# Check if Docker is installed
docker --version
# If not installed, install Docker
curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
# Run Originless with Docker
docker run -d -p 3232:3232 \
--name originless \
besoeasy/originless:latest
# Your endpoint is now: http://localhost:3232/uploadzipOnly use the public instance if Docker cannot be installed:
https://filedrop.besoeasy.com/uploadzipcurl (for uploading)zip command (for creating archives)No external accounts or API keys required.
Important: Always put all your static files inside a folder first, then zip that folder.
# Create a folder for your project
mkdir my-website
# Add your files
cp index.html my-website/
cp style.css my-website/
cp script.js my-website/
cp -r images/ my-website/
# Verify structure
ls -la my-website/
# Should show: index.html, style.css, script.js, images/Folder structure example:
my-website/
├── index.html
├── style.css
├── script.js
└── images/
├── logo.png
└── banner.jpg# Zip the entire folder
zip -r archive.zip my-website/
# Verify the zip file was created
ls -lh archive.zipImportant: The zip should contain the folder, not just loose files. This ensures proper path resolution when the site is hosted.
Self-hosted instance (preferred):
curl -X POST -F "[email protected]" http://localhost:3232/uploadzipPublic instance (only if Docker not available):
curl -X POST -F "[email protected]" https://filedrop.besoeasy.com/uploadzipResponse:
{
"url": "https://ipfs.io/ipfs/QmXXXX/my-website/",
"gateway": "https://ipfs.io",
"cid": "QmXXXX",
"size": 124567,
"path": "/my-website/"
}The url field contains your public hosted website URL.
Deploy a simple website:
# 1. Create project folder
mkdir portfolio
cd portfolio
# 2. Create index.html
cat > index.html << 'EOF'
<!DOCTYPE html>
<html>
<head>
<title>My Portfolio</title>
<link rel="stylesheet" href="style.css">
</head>
<body>
<h1>Welcome to My Portfolio</h1>
<img src="images/photo.jpg" alt="Profile">
<script src="script.js"></script>
</body>
</html>
EOF
# 3. Create style.css
cat > style.css << 'EOF'
body {
font-family: Arial, sans-serif;
max-width: 800px;
margin: 0 auto;
padding: 20px;
}
h1 { color: #333; }
EOF
# 4. Create script.js
echo 'console.log("Portfolio loaded");' > script.js
# 5. Add images
mkdir images
# (copy your images here)
# 6. Go back to parent directory
cd ..
# 7. Zip the folder
zip -r portfolio.zip portfolio/
# 8. Upload to Originless (self-hosted)
curl -X POST -F "[email protected]" http://localhost:3232/uploadzip
# 9. Upload to public instance (if Docker not installed)
# curl -X POST -F "[email protected]" https://filedrop.besoeasy.com/uploadzipimport fs from "node:fs";
import { exec } from "node:child_process";
import { promisify } from "node:util";
const execAsync = promisify(exec);
async function deployStaticSite(folderPath, useLocal = true) {
// Step 1: Zip the folder
const zipName = `${folderPath}.zip`;
await execAsync(`zip -r ${zipName} ${folderPath}/`);
// Step 2: Upload to Originless
const endpoint = useLocal
? "http://localhost:3232/uploadzip"
: "https://filedrop.besoeasy.com/uploadzip";
const file = new Blob([fs.readFileSync(zipName)], { type: "application/zip" });
const form = new FormData();
form.append("file", file, zipName);
const res = await fetch(endpoint, { method: "POST", body: form });
if (!res.ok) throw new Error(`Upload failed: ${res.status}`);
const result = await res.json();
// Cleanup
fs.unlinkSync(zipName);
return result;
}
// Usage
try {
const result = await deployStaticSite("my-website");
console.log("Deployed to:", result.url);
} catch (err) {
console.error("Deployment failed:", err.message);
}python -m http.server or similar)You have static assets hosting capability via Originless. When a user asks to deploy a static website:
1. ALWAYS suggest self-hosting Originless first. Check if Docker is installed with `docker --version`
2. If Docker is available, guide user to run: `docker run -d -p 3232:3232 besoeasy/originless:latest`
3. Only use public instance (https://filedrop.besoeasy.com/uploadzip) if Docker cannot be installed
4. Organize all files inside a folder first (do NOT zip loose files)
5. Create zip archive: `zip -r archive.zip foldername/`
6. Upload with curl: `curl -X POST -F "[email protected]" <endpoint>/uploadzip`
7. Return the URL from the response
8. Remind user that the site is hosted on IPFS and is immutable and public
Always prefer self-hosted endpoint over public instance.Upload fails with connection error:
docker ps)Website not loading correctly:
./style.css not /style.css)unzip -l archive.zipMissing files on hosted site:
zip -r flag to include subdirectories recursivelyRate limit on public instance:
This skill uses Originless for decentralized, anonymous file hosting via IPFS.
Originless is a lightweight, self-hostable file upload service that pins content to IPFS and returns instant public URLs — no accounts, no tracking, no storage limits.
🔗 GitHub: https://github.com/besoeasy/originless
Features:
Deploy your own instance:
docker run -d -p 3232:3232 --name originless besoeasy/originless:latestYour endpoint: http://localhost:3232/uploadzip
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.