contentful-nextjs

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses ! commands in SKILL.md to inspect the project's state, including installed dependencies and environment variables. The command grep -h CONTENTFUL .env.local .env | sed 's/=.*/=<set>/' effectively checks for the presence of Contentful keys while masking their actual values, preventing credential exposure.
  • [EXTERNAL_DOWNLOADS]: The skill links to official documentation and version release pages at contentful.com and github.com/vercel/next.js. These are categorized as safe, well-known, and trusted sources for development resources.
  • [SAFE]: The skill provides standard integration guidance for a well-known CMS, includes security best practices such as server-side token management, and lacks any malicious patterns or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 06:15 AM