gatsby
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill encourages secure credential management by referencing environment variables (
process.env.CONTENTFUL_ACCESS_TOKEN) rather than hardcoding sensitive keys. - [EXTERNAL_DOWNLOADS]: The documentation includes standard examples of fetching data from external APIs using the
fetchAPI during both the build process (sourceNodesingatsby-node.js) and at runtime (getServerDatafor SSR). This is standard functionality for static site generators. - [COMMAND_EXECUTION]: Provides routine Gatsby CLI commands for project setup and development, such as
npm init gatsby,npm run develop, andnpm run build. - [SAFE]: The use of
dangerouslySetInnerHTMLin the SSR plugin example is a standard React pattern for injecting a static, benign script to handle theme persistence and does not constitute a vulnerability in this context.
Audit Metadata