storyblok-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation, architectural guidance, and code examples for Storyblok integration. It does not contain any executable malicious instructions.\n- [SAFE]: API tokens and secrets in the code snippets are managed securely through environment variables or descriptive placeholders, adhering to security best practices.\n- [SAFE]: External dependencies and CLI tools mentioned, such as the official Storyblok SDKs and CLI, are standard and well-known development resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting content from an external CMS. It addresses the inherent security risks by explicitly recommending that developers sanitize this content using libraries like DOMPurify before rendering it in the frontend.
Audit Metadata