contentful-custom-app-from-scratch
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill emphasizes secure handling of credentials, instructing users to model sensitive information as 'secret installation parameters' rather than hardcoding them in the source code.
- [EXTERNAL_DOWNLOADS]: The skill uses the official 'create-contentful-app' utility via npx for project scaffolding. This is a standard and safe procedure for Contentful development.
- [COMMAND_EXECUTION]: Local command execution (e.g., npx, npm/yarn scripts, and ripgrep/rg for source code auditing) is used appropriately for project management and security verification.
- [SAFE]: Instructions include a manual security audit step (using 'rg') to ensure runtime code is retrieving configuration parameters correctly from the SDK rather than making unnecessary API calls that might expose metadata.
- [SAFE]: The skill targets official Contentful domains and GitHub repositories for documentation and reference implementation examples.
Audit Metadata