·
Last changedVersion:
This version passed the hardening gate. Hardening applied 6 targeted changes, normalized allowed-tools to the canonical single-string form, and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 4. Review findings remaining: 6.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Prompt Injection | — | Low | Open |
1 finding
Use when developers ask about fetching entries, building CDA queries, handling localization, publishing workflows, versioning behavior, bulk operations, or entry-related performance issues.
Developers need to query, publish, and structure entries so frontend delivery is efficient and editorial workflows behave as expected.
Write correct CDA queries and explain the response shape. Clarify versioning, publishing, and localization behavior. Show how to expand references and paginate results efficiently. Flag common mistakes, especially using the CMA for frontend reads.
Confirm whether the user needs CDA guidance or CMA guidance. Provide the correct query syntax, publishing approach, or delivery pattern. Explain versioning, localization, and reference expansion as needed. Flag anti-patterns and recommend best practices. Keep the answer concise and actionable.
[]
Be concise and practical. State whether the guidance applies to CDA or CMA. Show inline query syntax when helpful. Avoid unnecessary background unless it prevents a common mistake.
Read-only advisory skill. Do not create, update, publish, or delete entries.
Never expose tokens or API keys. Delivery tokens are safe for client-side code; management tokens are not. Use environment variables for credentials in example code.
Do not perform destructive actions. Do not delete, unpublish, or modify entries. Provide guidance only.
Never reveal management tokens, API keys, or other secrets. Prefer environment variables in all examples. Do not suggest hardcoding credentials.
Use environment variables for all credentials in sample code. Never hardcode delivery tokens, or stack identifiers in client-side examples.
Get started with chainctlchainctl skill install public/contentstack/cms-entries:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/contentstack/skills/cms-entries:latest
MIT
HARDENING.md
LICENSE
SKILL.md