contentstudio
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides an interface to the professional ContentStudio platform via official API endpoints.
- [SAFE]: Authentication credentials (API keys) are managed securely; the skill stores them in a local JSON configuration with restricted file permissions (0600) and redacts them in console output.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves post and comment data from external social media platforms, creating a potential surface for indirect prompt injection. However, the use-case is legitimate and the risk is managed through structured data handling and safety protocols.
- Ingestion points: API responses for post and comment listings (src/api.ts).
- Boundary markers: The agent is instructed to use structured JSON output and verify actions with --dry-run.
- Capability inventory: Social media post creation, deletion, and comment management (src/api.ts).
- Sanitization: No explicit sanitization of retrieved text content is performed.
- [EXTERNAL_DOWNLOADS]: The skill performs an update check by fetching metadata from the official npm registry. This is a standard maintenance function for a CLI tool and targets a trusted service.
Audit Metadata