html2link-publish — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited html2link-publish (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use html2link to turn local artifacts into short links that open directly in a browser. Prefer this skill after creating a report, prototype, dashboard, presentation, document, static site, or other deliverable that the user may want to view or share.
.html, .htm.zip static sites that contain index.html; archives with one top-level folder are normalized by html2link.pdf.md, .markdown.xlsx, .xls, .csv.docx.pptxindex.html at the root when possible.scripts/publish-html2link.mjs or an equivalent curl request.url field to the user unless they ask for API details.updateToken as private. Store or show it only when the user explicitly wants to update or delete the same link later.Run the bundled script from the skill directory or with an absolute path:
node scripts/publish-html2link.mjs /absolute/path/to/report.htmlThe script prints the JSON API response. It reads these optional environment variables:
HTML2LINK_BASE_URL: Defaults to https://html2link.devHTML2LINK_API_TOKEN: Bearer token for files over the anonymous limitUpdate an existing link:
node scripts/publish-html2link.mjs /absolute/path/to/report.html --slug a1B2c3D4 --update-token keep-this-privateDelete a link:
node scripts/publish-html2link.mjs --delete --slug a1B2c3D4 --update-token keep-this-privateUpload with multipart field file:
curl -F "file=@/absolute/path/to/report.html" https://html2link.dev/api/uploadFor files above 1 MB, include a signed-in user's API token:
curl -H "Authorization: Bearer $HTML2LINK_API_TOKEN" -F "file=@/absolute/path/to/report.pptx" https://html2link.dev/api/uploadSuccessful response:
{
"slug": "a1B2c3D4",
"updateToken": "keep-this-private",
"url": "https://html2link.dev/x/a1B2c3D4",
"kind": "html",
"size": "42 KB",
"updated": false
}Update an existing link:
curl -F "slug=a1B2c3D4" -F "updateToken=keep-this-private" -F "file=@/absolute/path/to/report.html" https://html2link.dev/api/uploadDelete an existing link:
curl -X DELETE -H "Content-Type: application/json" -d '{"slug":"a1B2c3D4","updateToken":"keep-this-private"}' https://html2link.dev/api/uploadrequiresLogin: true, tell the user the file is over the anonymous limit and needs authenticated publishing with HTML2LINK_API_TOKEN.Keep the response concise:
Published: https://html2link.dev/x/a1B2c3D4Mention the local file path only when it is useful for follow-up work.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.