devto
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits article data to dev.to, which is a well-known developer platform. This communication is authenticated using the $DEVTO_API_KEY environment variable provided through the platform's connector.
- [COMMAND_EXECUTION]: Utilizes standard and expected system tools, including curl, jq, and cat, to interact with the API and process local Markdown files.
- [SAFE]: Implements secure handling for external article content during the publishing process. 1. Ingestion points: Reads the contents of article.md from the local filesystem. 2. Boundary markers: The skill instructs the agent to treat the ingested content as the body_markdown field of the article object. 3. Capability inventory: The skill is capable of reading local files and making network POST requests to a known API. 4. Sanitization: The skill employs the jq --arg flag to ensure that article content is treated strictly as a literal string, which prevents the content from being interpreted as code or malforming the API request structure.
Audit Metadata