cms-integration
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive architectural guidance and code examples for CMS integration without introducing malicious code or behaviors.- [SAFE]: The documentation explicitly identifies and warns against common security mistakes, such as hardcoding API tokens and using unsafe rendering methods like
dangerouslySetInnerHTML.- [SAFE]: Webhook implementation examples include robust security measures, specifically verifying signatures usingcrypto.timingSafeEqualto prevent unauthorized revalidation requests.- [SAFE]: All code snippets demonstrating data fetching and authentication utilize environment variables, adhering to the principle of secure secret management.- [SAFE]: The skill recommends using platform-specific rich text renderers (e.g., PortableText, Contentful Rich Text) which provide built-in sanitization against Cross-Site Scripting (XSS) compared to raw HTML rendering.
Audit Metadata