contentful-nextjs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses
!commands inSKILL.mdto inspect the project's state, including installed dependencies and environment variables. The commandgrep -h CONTENTFUL .env.local .env | sed 's/=.*/=<set>/'effectively checks for the presence of Contentful keys while masking their actual values, preventing credential exposure. - [EXTERNAL_DOWNLOADS]: The skill links to official documentation and version release pages at
contentful.comandgithub.com/vercel/next.js. These are categorized as safe, well-known, and trusted sources for development resources. - [SAFE]: The skill provides standard integration guidance for a well-known CMS, includes security best practices such as server-side token management, and lacks any malicious patterns or obfuscation.
Audit Metadata