blogger
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts only with official Google API domains (googleapis.com), which are recognized as well-known and trusted services.\n- [SAFE]: Sensitive data is handled correctly by using environment variables ($GOOGLE_BLOGGER_TOKEN) for OAuth tokens instead of hardcoding credentials.\n- [SAFE]: The skill prevents injection vulnerabilities by using jq's --arg flag to properly escape user-provided content (titles and HTML) before sending it to the API.\n- [SAFE]: The skill incorporates human-in-the-loop safety by instructing the agent to confirm with the user before publishing posts publicly.
Audit Metadata