here.now
here.now lets agents publish websites and files to live URLs in seconds. Publish HTML, documents, images, PDFs, videos, and static files to live URLs at {slug}.here.now or custom domains. Use when asked to "publish this", "host this", "deploy this", "share this on the web", "make a website", "put this online", "create a webpage", "generate a URL", "build a chatbot", "password protect this site", "make this site private", or "share this site with only certain people". here.now also includes workspaces — shared team accounts where Sites belong to the team and serve at {label}.{workspace}.here.now — use when asked to "publish this to our team workspace", "share this with my team", or "put this in our company workspace". Agents can also buy a domain for a Site through here.now (no markup, DNS and SSL automatic) — use when asked to "buy a domain", "get me a .com for this", or "register a domain".
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill documents buying a domain ("buy a domain", "get me a .com for this", "register a domain" referencing https://here.now/docs#buy-domain), which constitutes a direct financial purchase operation. However, the documentation notes that purchasing requires explicit user confirmation and interaction with the API/docs (indirectly managed or documented as an authenticated user action), but no independent execution-layer access control or charge gating is specified for the raw payment route described in the text (aside from mentioning user agreement/quotes). Since it allows direct purchases without an independent validation mechanism enforced by the execution layer for the payment instruction itself, it falls under high severity.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow instructs the agent to read current documentation and retrieve files from Drive or published sites, which involves fetching external content from here.now.
- Repository
heredotnow/skill
- Revision
a85fa61
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.