hashnode
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill handles sensitive session cookies (
hashnode-session) stored in theHASHNODE_COOKIESenvironment variable. The script includes robust logic to ensure these cookies are only attached to requests targetinghashnode.comand explicitly uses unredirected headers to prevent credentials from being leaked if the API redirects to an external host. - [COMMAND_EXECUTION]: The skill executes a bundled Python script (
hashnode.py) using theBashtool. It employs a dynamic path resolution pattern to locate the script in/tmpdirectories as a fallback if the primary$SKILL_DIRis unavailable. - [DATA_EXFILTRATION]: The skill communicates with
hashnode.comto manage blog content. While this involves sending authentication data, it is scoped strictly to the official service domain and is necessary for the skill's primary function.
Audit Metadata