emdash-cms
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation for the EmDash CMS framework and does not contain malicious code or instructions.- [EXTERNAL_DOWNLOADS]: The skill references the installation of the 'emdash' framework and associated tools from official registries using standard package managers (npm, pnpm).- [COMMAND_EXECUTION]: Includes standard development CLI commands for project scaffolding, database migrations, and content importing (e.g., 'npm create emdash@latest', 'npx emdash migrate', 'npx emdash import:wordpress').- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates the use of environment variables (e.g., 'process.env.GITHUB_CLIENT_SECRET', 'process.env.TURSO_AUTH_TOKEN') and placeholders for sensitive information rather than hardcoding actual secrets.- [DYNAMIC_EXECUTION]: Documents a plugin architecture designed to run in sandboxed Cloudflare Worker isolates, which is a security feature to mitigate risks associated with dynamic code execution.
Audit Metadata