cms-integration

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive architectural guidance and code examples for CMS integration without introducing malicious code or behaviors.- [SAFE]: The documentation explicitly identifies and warns against common security mistakes, such as hardcoding API tokens and using unsafe rendering methods like dangerouslySetInnerHTML.- [SAFE]: Webhook implementation examples include robust security measures, specifically verifying signatures using crypto.timingSafeEqual to prevent unauthorized revalidation requests.- [SAFE]: All code snippets demonstrating data fetching and authentication utilize environment variables, adhering to the principle of secure secret management.- [SAFE]: The skill recommends using platform-specific rich text renderers (e.g., PortableText, Contentful Rich Text) which provide built-in sanitization against Cross-Site Scripting (XSS) compared to raw HTML rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 07:54 PM
Security Audit — agent-trust-hub — cms-integration