dev-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official vendor CLI tool
@contentstack/cliand seeding data from thecontentstack/kickstart-stack-seedGitHub repository. These are documented as legitimate resources managed by the vendor. - [DATA_EXFILTRATION]: The skill promotes secure development practices by instructing users to copy environment variables to a local
.envfile, ensuring sensitive credentials from the Contentstack stack are not hardcoded or committed to version control. - [COMMAND_EXECUTION]: Instructions involve standard local development operations such as
npm install,npm run dev, and the vendor'scsdxCLI tools for authentication and project seeding, which align with the skill's intended purpose.
Audit Metadata