postiz-cli-agents

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill references official Postiz documentation (docs.postiz.com) and GitHub repositories (github.com/gitroomhq), which are established resources for the Postiz social media platform.
  • [SAFE]: Instructions for managing the POSTIZ_API_KEY follow security best practices by advising the use of environment variables and warning against committing secrets to version control or logs.
  • [SAFE]: The installation instructions for the postiz package using standard package managers (npm, pnpm, bun) refer to the legitimate CLI tool provided by the platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external APIs via commands such as posts:list and analytics:platform.
  • Ingestion points: Data is fetched from the Postiz API in SKILL.md and references/cli-command-reference.md.
  • Boundary markers: The instructions recommend using jq for parsing JSON stdout, which helps maintain data boundaries during automation.
  • Capability inventory: The skill includes capabilities to create (posts:create), delete (posts:delete), and upload media (upload) via the CLI.
  • Sanitization: The skill does not explicitly detail sanitization steps, as it relies on the Postiz platform's API and the user's script logic for data handling.
  • The data ingestion surface is consistent with the primary purpose of a social media management tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 04:04 PM