sanity-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation references standard npm packages and official tools within the Sanity.io ecosystem (e.g., @sanity/client, next-sanity, @sanity/blueprints). These are legitimate resources provided by the vendor for platform integration.
  • [COMMAND_EXECUTION]: Instructions include the use of the official Sanity CLI (npx sanity@latest) for project setup, schema management, and infrastructure deployment via Sanity Blueprints and Functions.
  • [SAFE]: The skill includes multiple sections dedicated to security best practices, such as ensuring API tokens are not exposed in client-side bundles, using server-only environment variables for secrets, and sanitizing data to prevent issues with Content Source Maps (Stega) in Visual Editing environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:39 AM
Security Audit — agent-trust-hub — sanity-best-practices