datocms-cli
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official
datocmsCLI and associated npm packages (e.g.,@datocms/cli-plugin-wordpress,@datocms/cli-plugin-contentful) which are verified vendor resources. - [SAFE]: Mandatory human-in-the-loop confirmation steps are required for all destructive or production-sensitive operations, such as destroying environments, promoting sandboxes to primary, or running destructive CMA calls.
- [SAFE]: Authentication follows best practices, favoring OAuth-based flows (
datocms login+datocms link) and supporting secure environment variables for unattended environments, while explicitly warning against manual token pasting. - [SAFE]: Dynamic code execution via
cma:scriptand CLI plugin management are documented as standard extension points of the DatoCMS ecosystem and are used here for intended development tasks.
Audit Metadata