ghost
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard administrative tool designed for content management on Ghost CMS platforms. It functions as described and uses official API endpoints.\n- [COMMAND_EXECUTION]: A test script (scripts/test_ghost.py) uses subprocess.run to execute the local ghost script during automated testing to verify CLI behavior.\n- [CREDENTIALS_SAFE]: Authentication is handled via environment variables (GHOST_ADMIN_KEY, GHOST_URL). The skill signs tokens locally and does not hardcode or exfiltrate secrets.\n- [INDIRECT_PROMPT_INJECTION]: The tool retrieves data from the configured Ghost API and presents it to the agent. This represents a standard data ingestion surface for content management tasks.
Audit Metadata