keystonejs

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions to run standard development commands such as npm create keystone-app, npm install, and npx keystone dev to initialize and manage the CMS project.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs official KeystoneJS packages from the npm registry, which is a well-known service for software dependencies.
  • [DATA_EXFILTRATION]: A lifecycle hook example demonstrates using fetch to send a POST request to a revalidation endpoint. This is a documented, legitimate pattern for cache invalidation in headless CMS architectures and correctly utilizes environment variables for URLs and secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 06:07 AM
Security Audit — agent-trust-hub — keystonejs