newsletter-platform-weapon
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses standard instructional language to guide the agent in recommending newsletter platforms. There are no attempts to bypass safety filters or override system instructions.
- [CREDENTIALS_UNSAFE]: Code snippets for Next.js API routes correctly use environment variables (e.g.,
process.env.BEEHIIV_API_KEY) for secret management. No hardcoded credentials or sensitive local file paths were found. - [EXTERNAL_DOWNLOADS]: The skill references official APIs for well-known services (Beehiiv, Loops, Resend) and provides links to reputable research sources. No unauthorized or dangerous remote code downloads were detected.
- [COMMAND_EXECUTION]: The instructions do not involve the execution of shell commands, sudo, or other potentially harmful administrative actions on the host system.
- [DATA_EXFILTRATION]: Network operations in the provided code templates are restricted to the user's configured newsletter service providers. There is no evidence of data being sent to suspicious or unauthorized third-party domains.
Audit Metadata