weaverse-content-api
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Node.js helper script (
scripts/weaverse_content_api.mjs) designed to be run from the command line. This script performs routine operations like reading files and making network requests to manage Weaverse content. - [EXTERNAL_DOWNLOADS]: The skill interacts with the Weaverse Content API at
https://studio.weaverse.io/api/v1/content. All network operations are directed to the vendor's official infrastructure. - [DATA_EXFILTRATION]: The skill transmits project data, page content, and theme settings to the Weaverse API. These operations are essential to the skill's primary function and are authenticated using a bearer token provided by the user.
- [CREDENTIALS_UNSAFE]: The skill uses a
WEAVERSE_API_KEYfor authentication. The instructions explicitly advise against hardcoding this secret and recommend using environment variables, which is a standard and secure practice for secret management.
Audit Metadata