skills/acedatacloud/skills/hashnode/Gen Agent Trust Hub

hashnode

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill handles sensitive session cookies (hashnode-session) stored in the HASHNODE_COOKIES environment variable. The script includes robust logic to ensure these cookies are only attached to requests targeting hashnode.com and explicitly uses unredirected headers to prevent credentials from being leaked if the API redirects to an external host.
  • [COMMAND_EXECUTION]: The skill executes a bundled Python script (hashnode.py) using the Bash tool. It employs a dynamic path resolution pattern to locate the script in /tmp directories as a fallback if the primary $SKILL_DIR is unavailable.
  • [DATA_EXFILTRATION]: The skill communicates with hashnode.com to manage blog content. While this involves sending authentication data, it is scoped strictly to the official service domain and is necessary for the skill's primary function.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 05:41 PM
Security Audit — agent-trust-hub — hashnode