contentstudio
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill manages authentication using an API key stored in a local configuration file (
~/.config/contentstudio/config.json). The implementation uses strict file permissions (0600for the file,0700for the directory), which is the industry standard for securing CLI credentials on local systems. - [COMMAND_EXECUTION]: The skill instructs the agent to use the
contentstudioCLI to perform social media management tasks. The instructions emphasize the use of the--jsonflag for parseable output and--dry-runfor validating operations before execution, which are excellent safety features for AI agents. - [EXTERNAL_DOWNLOADS]: The CLI includes a background update checker that fetches the latest version string from the official npm registry (
registry.npmjs.org). This is a standard, non-blocking notification feature common in developer tools and does not involve the execution of remote code. - [DATA_EXPOSURE]: The skill allows the agent to upload local media files to the ContentStudio media library as part of its core functionality. This access is scoped to specific user-initiated or agent-requested file paths.
Audit Metadata