The Agent Skills Directory

[SAFE]: The skill implements standard security practices by instructing the agent to read API tokens from environment variables rather than hardcoding them, and specifically warns against exposing private tokens to the browser.
[SAFE]: All identified dependencies, including @datocms/cda-client, gql.tada, and graphql-codegen, are legitimate, well-known, and established packages within the web development ecosystem.
[SAFE]: Command execution patterns described in the documentation (e.g., npm install, gql.tada generate) are standard development tasks associated with the skill's primary purpose of setting up a GraphQL client and generating types.
[SAFE]: Network operations are restricted to official DatoCMS endpoints (graphql.datocms.com) and well-known, trusted service providers like imgix and Mux.
[SAFE]: No evidence of obfuscation, data exfiltration, or prompt injection was found across the skill's instructions or its extensive reference documentation.

datocms-cda