keystonejs
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to run standard development commands such as
npm create keystone-app,npm install, andnpx keystone devto initialize and manage the CMS project. - [EXTERNAL_DOWNLOADS]: The skill references and installs official KeystoneJS packages from the npm registry, which is a well-known service for software dependencies.
- [DATA_EXFILTRATION]: A lifecycle hook example demonstrates using
fetchto send a POST request to a revalidation endpoint. This is a documented, legitimate pattern for cache invalidation in headless CMS architectures and correctly utilizes environment variables for URLs and secrets.
Audit Metadata