postiz-cli-agents
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill references official Postiz documentation (
docs.postiz.com) and GitHub repositories (github.com/gitroomhq), which are established resources for the Postiz social media platform. - [SAFE]: Instructions for managing the
POSTIZ_API_KEYfollow security best practices by advising the use of environment variables and warning against committing secrets to version control or logs. - [SAFE]: The installation instructions for the
postizpackage using standard package managers (npm, pnpm, bun) refer to the legitimate CLI tool provided by the platform. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external APIs via commands such as
posts:listandanalytics:platform. - Ingestion points: Data is fetched from the Postiz API in
SKILL.mdandreferences/cli-command-reference.md. - Boundary markers: The instructions recommend using
jqfor parsing JSON stdout, which helps maintain data boundaries during automation. - Capability inventory: The skill includes capabilities to create (
posts:create), delete (posts:delete), and upload media (upload) via the CLI. - Sanitization: The skill does not explicitly detail sanitization steps, as it relies on the Postiz platform's API and the user's script logic for data handling.
- The data ingestion surface is consistent with the primary purpose of a social media management tool.
Audit Metadata