webiny-sdk

webiny-sdk is a JavaScript & TypeScript skill for AI agents, published by webiny in the webiny-js repository on GitHub. Skillspace rates webiny-sdk F (47/100) and the safety scan flagged it for review; the rating is based on static analysis only.

Using @webiny/sdk to read and write CMS data from external applications. Use this skill when the developer is building a Next.js, Vue, Node.js, or any external app that needs to fetch or write content to Webiny, set up the SDK, use the Result pattern, list/get/create/update/publish entries, filter and sort queries, use TypeScript generics for type safety, work with the File Manager, list languages, trigger or monitor background tasks, or create API keys programmatically. Covers read vs preview mode, the `values` wrapper requirement, correct method names, and the `fields` required parameter, and background task management via `sdk.tasks`. Also covers common SDK errors and troubleshooting — especially "Content model '<modelName>' not found" (which usually means the API key lacks permission, not that the model is missing) and the Website Builder starter pitfall of reusing NEXT_PUBLIC_WEBSITE_BUILDER_API_KEY for Headless CMS reads (that key has no CMS permissions by default and needs…

Grade
F
Quality
47 / 100
Safety
Needs review
GitHub stars
8,035

Unproven: rated by static analysis only, not yet compared head-to-head.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

View source on GitHubwebiny/webiny-js

Our review

Architecture
62 / 100
Maturity
Basic: a single SKILL.md
Security scan
Medium-risk patterns
License
Not declared. Check the repository before reusing it.

What the scanner flagged

  • reads environment variables
  • mentions secrets in text

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in JavaScript & TypeScript

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.