cms-environments-publishing
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely advisory and does not include any scripts, commands, or tools that would allow for code execution, file system modification, or network requests.
- [SAFE]: It explicitly warns against hardcoding sensitive credentials and provides clear instructions on the safe handling of Management Tokens (server-side only) versus Delivery Tokens (client-side safe).
- [SAFE]: The instructions specifically prohibit the agent from performing any write or destructive actions, such as publishing, unpublishing, or modifying environments.
- [SAFE]: References to external domains (e.g., cdn.contentstack.io, eu-cdn.contentstack.com) are legitimate, well-known regional endpoints for the Contentstack service and do not represent a security risk.
Audit Metadata