portal-expose

72 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By gosuda/portal-tunnel (GitHub) · devops · 302 stars · scanned at commit 88d6457

Expose, preview, protect with x402 payments or sign-in, or keep a local web app, static site, HTTP route set, or explicitly requested TCP/UDP service reachable through Portal, then verify the public endpoint and report its lifecycle. This is the app side of Portal, the same flow as the quick-start form on a relay website (install, run one portal expose command built from the app settings, open the public URL). Use when the user asks to deploy, publish, share, tunnel, expose, or connect a local …

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: github.com

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 10 places.

plugins/portal-tunnel/skills/portal-expose/SKILL.md, line 119- Verify the URL being handed off (`alias_url` when granted, otherwise `public_url`) with one bounded request. `*.localhost` often resolves to `::1` first, so u
plugins/portal-tunnel/skills/portal-expose/references/agent-backends.md, line 39- **Verify:** from outside, `curl -sS --max-time 10 -o /dev/null -w '%{http_code}\n' https://<identity-bound host>/api/session` must return `401`. A `200` witho
plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2041. `curl -sI https://<host>/` returns `303` with `Location: /_portal/auth/login?next=%2F`. A `200` means the gate is not on; stop and report it.

Show 7 more

plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2052. `curl -s -X POST https://<host>/` returns `401` with `{"error":"authentication required"}`.
plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2063. `credential`: `curl -s -H "X-Portal-Access-Credential: $C" https://<host>/` returns the app's real response. Use the credential you already issued for the su
plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2074. `oidc` and `saml`: `curl -s -o /dev/null -w '%{http_code} %{redirect_url}\n' https://<host>/_portal/auth/login` prints `303` and the provider's authorization
plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2085. `saml`: `curl -s https://<host>/_portal/auth/saml/metadata` returns the service provider metadata with the entity ID and the ACS address that the provider mu
plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 2096. `email`: `curl -s -o /dev/null -w '%{http_code}\n' -X POST -H 'Origin: https://<host>' -H 'Content-Type: application/json' -d '{"email":"nobody@example.inval
plugins/portal-tunnel/skills/portal-expose/references/portal-cli.md, line 17curl -fsSL https://github.com/gosuda/portal-tunnel/releases/latest/download/install.sh | bash
plugins/portal-tunnel/skills/portal-expose/references/webhook-endpoints.md, line 32Make one unsigned `POST` with an empty JSON body (`curl -sS --max-time 10 -o /dev/null -w '%{http_code}\n' -X POST -H 'Content-Type: application/json' --data '{

Changes files outside its own folder

The author does not mention this.

Found in 1 place.

plugins/portal-tunnel/skills/portal-expose/references/application-auth.md, line 161(umask 077 && mkdir -p ~/.config/portal && openssl rand -hex 32 > ~/.config/portal/my-app.proof)

Downloads and installs other software

The author does not mention this. Expected for a devops skill.

Found in 1 place.

plugins/portal-tunnel/skills/portal-expose/references/portal-cli.md, line 17curl -fsSL https://github.com/gosuda/portal-tunnel/releases/latest/download/install.sh | bash

Other copies in this repository

gosuda/portal-tunnel has 1 more folder with a skill named portal-expose. This page shows the lowest-scoring copy.

plugins/portal-deploy/skills/portal-expose 100/100 · Low risk

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'portal-expose' ] || [ -L ~/.agents/skills/'portal-expose' ]; then echo 'A skill folder named portal-expose already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/gosuda/portal-tunnel' "$d" && git -C "$d" checkout --quiet '88d645739fdb59c7f19ce583db42d27b9ca6a3be' -- 'plugins/portal-tunnel/skills/portal-expose' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/portal-tunnel/skills/portal-expose' ~/.agents/skills/'portal-expose' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'portal-expose' ~/.claude/skills/'portal-expose' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for gosuda/portal-tunnel shows the score of its lowest-scoring skill.

SkillTrust badge for gosuda/portal-tunnel

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/gosuda/portal-tunnel.svg)](https://zalavijaysinh.github.io/skilltrust/repos/gosuda/portal-tunnel/)

Score history

Date	Version	Score
2026-11-13	`88d6457`	72
2026-11-09	`d67941c`	72