tina-schema-sync
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
npx tinacms devcommand to locally regenerate schema artifacts. This is an expected operation for projects using the TinaCMS headless CMS framework. - [COMMAND_EXECUTION]: The skill includes Git commands (
git add,git commit,git push) to synchronize generated code and configuration files with the remote repository. - [DATA_EXPOSURE]: The instructions direct the agent to source sensitive environment variables from a
.env.localfile. It includes a verification step that echoes the first 10 characters of theTINA_TOKENandNEXT_PUBLIC_TINA_CLIENT_IDto the terminal. While this exposes a fragment of the secret in logs, it is a common debugging practice in developer documentation.
Audit Metadata