Skills
skills/datocms/agent-skills/datocms-setup/Gen Agent Trust Hub

datocms-setup

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several Node.js helper scripts (e.g., datocms-release.mjs, datocms-reset-sandbox.mjs, datocms-sync-projects.mjs) that automate DatoCMS operations. These scripts use spawnSync to execute npx datocms commands locally, wrapping the official CLI for development-time automation.
  • [EXTERNAL_DOWNLOADS]: The recipes instruct the agent to install official DatoCMS packages and CLI plugins (e.g., @datocms/cma-client, @datocms/cli-plugin-contentful, react-datocms) via standard registries. These are legitimate vendor resources used for project scaffolding.
  • [SAFE]: The 'silent' instructions in the recipes are standard patterns for agentic discovery (context gathering) and do not represent malicious concealment. All sensitive credentials, such as API tokens and passwords, are managed through framework-appropriate environment variable conventions with placeholders used in examples.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 07:36 PM
Security Audit — agent-trust-hub — datocms-setup