Ghost CMS Agent

Manage Ghost CMS content via the REST API. Create and publish posts, manage tags, and fetch site analytics. Supports both the Content API (public data) and A...

Security Scan

The skill's code and instructions are coherent with its stated purpose (managing Ghost via the Admin API); the included scripts are readable and only call the provided Ghost site, but you should note missing declared CLI dependencies and that an Admin API key grants full site management privileges.

Purpose & Capability

Name/description (manage Ghost posts, tags, and stats) matches the included scripts (new-post, posts, tags, stats). Required env vars GHOST_URL and GHOST_ADMIN_API_KEY are appropriate for the Admin API operations performed.

Instruction Scope

SKILL.md and scripts confine actions to the Ghost Admin API endpoints on the configured GHOST_URL and do not attempt to read unrelated files or contact other external hosts. Minor inconsistency: SKILL.md mentions an optional GHOST_CONTENT_API_KEY, but none of the included scripts actually use that variable.

Install Mechanism

No install spec (instruction-only) which is low-risk. However, the scripts have runtime dependencies not declared in the registry metadata: they invoke curl, jq, column, xargs, tr, sed and other standard shell utilities. The manifest lists no required binaries; the skill should declare these dependencies so users know what will be executed.

Credentials

Requesting GHOST_ADMIN_API_KEY is proportionate to creating/publishing posts and managing tags. Note: the Admin API key is powerful (can modify site content and members). If you only need read-only operations, prefer using a Content API key or a scoped credential instead.

Persistence & Privilege

The skill does not request persistent/always-on inclusion and does not modify other skills or system config. It runs ad-hoc scripts that call the Ghost API; no additional privileges are requested.

Assessment

This skill's code is readable and does what it says: it calls your Ghost site using the provided GHOST_URL and GHOST_ADMIN_API_KEY. Before installing, consider: 1) The Admin API key grants full management rights—use a least-privilege key or a dedicated integration account if possible. 2) The manifest omits runtime CLI dependencies (jq, curl, column, xargs, sed, tr); ensure your environment provides these tools. 3) SKILL.md mentions an optional Content API key, but the scripts don't use it—if you only want read-only access, confirm the scripts won't use the Admin key in your workflow. 4) The skill owner is unknown; if you will run these scripts against a production site, review/verify the code or run in a safe test environment first.

Ghost CMS

Manage Ghost CMS content via its REST API. Works with self-hosted and Ghost Pro sites.

Configuration

# Your Ghost site URL
export GHOST_URL="https://example.com"

# Admin API key (from Ghost Admin > Settings > Integrations)
export GHOST_ADMIN_API_KEY="your-admin-api-key"

# Optional: Content API key (for public data)
export GHOST_CONTENT_API_KEY="your-content-api-key"

Get Posts

bash skills/ghost-cms/scripts/posts.sh [--limit 10] [--page 1] [--status published]

Options:

• --limit — Number of posts to return (default: 10)
• --page — Page number (default: 1)
• --status — Filter by status: published, draft, scheduled, all (default: published)
• --format — Output format: json or table (default: json)

Create a New Post

bash skills/ghost-cms/scripts/new-post.sh \
  --title "My New Post" \
  --content "## Hello World

This is the post content in Markdown." \
  --tags "news,updates" \
  --publish

Options:

• --title — Post title (required)
• --content — Post content in Markdown (required)
• --excerpt — Short excerpt/summary (optional)
• --tags — Comma-separated tag names (optional, auto-creates)
• --publish — Publish immediately (omit to save as draft)
• --featured — Mark as featured (optional)

Manage Tags

# List all tags
bash skills/ghost-cms/scripts/tags.sh --list

# Create a tag
bash skills/ghost-cms/scripts/tags.sh --create --name "Tutorials" --description "How-to guides" --slug "tutorials"

# Get a tag by slug
bash skills/ghost-cms/scripts/tags.sh --slug "tutorials"

Get Site Stats

bash skills/ghost-cms/scripts/stats.sh

Returns: total posts, total published posts, total draft posts, total members, total paid members, total pageviews (if stats addon is enabled)

Notes

• Admin API key format: [id]:[apiKey] — split on the colon, use the second part as the bearer token
• Tags are created automatically if they don't exist when creating posts
• Ghost uses a Content-Type: application/json header for all API calls
• All scripts output JSON by default; use --format table for human-readable output where supported