wsc-sanity-cms
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves technical documentation and implementation patterns from Sanity.io, a well-known headless CMS service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an integration for processing external data from a CMS.
- Ingestion points: Data is fetched from Sanity CMS using the
next-sanityclient. - Boundary markers: The implementation uses specific GROQ projections to limit the fields retrieved from the remote source.
- Capability inventory: The skill renders fetched content into Next.js components and rich text blocks.
- Sanitization: The skill employs the
PortableTextlibrary, which is a secure standard for rendering rich text, and defines custom components to control the rendering of specific elements.
Audit Metadata