datocms-cli

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the official datocms CLI and associated npm packages (e.g., @datocms/cli-plugin-wordpress, @datocms/cli-plugin-contentful) which are verified vendor resources.
  • [SAFE]: Mandatory human-in-the-loop confirmation steps are required for all destructive or production-sensitive operations, such as destroying environments, promoting sandboxes to primary, or running destructive CMA calls.
  • [SAFE]: Authentication follows best practices, favoring OAuth-based flows (datocms login + datocms link) and supporting secure environment variables for unattended environments, while explicitly warning against manual token pasting.
  • [SAFE]: Dynamic code execution via cma:script and CLI plugin management are documented as standard extension points of the DatoCMS ecosystem and are used here for intended development tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 07:51 AM