contentstudio

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill manages authentication using an API key stored in a local configuration file (~/.config/contentstudio/config.json). The implementation uses strict file permissions (0600 for the file, 0700 for the directory), which is the industry standard for securing CLI credentials on local systems.
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the contentstudio CLI to perform social media management tasks. The instructions emphasize the use of the --json flag for parseable output and --dry-run for validating operations before execution, which are excellent safety features for AI agents.
  • [EXTERNAL_DOWNLOADS]: The CLI includes a background update checker that fetches the latest version string from the official npm registry (registry.npmjs.org). This is a standard, non-blocking notification feature common in developer tools and does not involve the execution of remote code.
  • [DATA_EXPOSURE]: The skill allows the agent to upload local media files to the ContentStudio media library as part of its core functionality. This access is scoped to specific user-initiated or agent-requested file paths.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 03:30 PM