contentstudio

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides an interface to the professional ContentStudio platform via official API endpoints.
  • [SAFE]: Authentication credentials (API keys) are managed securely; the skill stores them in a local JSON configuration with restricted file permissions (0600) and redacts them in console output.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves post and comment data from external social media platforms, creating a potential surface for indirect prompt injection. However, the use-case is legitimate and the risk is managed through structured data handling and safety protocols.
  • Ingestion points: API responses for post and comment listings (src/api.ts).
  • Boundary markers: The agent is instructed to use structured JSON output and verify actions with --dry-run.
  • Capability inventory: Social media post creation, deletion, and comment management (src/api.ts).
  • Sanitization: No explicit sanitization of retrieved text content is performed.
  • [EXTERNAL_DOWNLOADS]: The skill performs an update check by fetching metadata from the official npm registry. This is a standard maintenance function for a CLI tool and targets a trusted service.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 03:06 AM
Security Audit — agent-trust-hub — contentstudio