secrets-management
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for developers to avoid hardcoding credentials. It provides correct and safe patterns for Node.js, Python, Laravel, and Cloudflare Workers.
- [CREDENTIALS_UNSAFE]: The document contains multiple examples of API keys, connection strings, and tokens (e.g.,
sk_test_abc123,password123). These are clearly marked as dummy data for demonstration purposes. The skill's primary focus is to teach the remediation of credential exposure, which is a significant security improvement. - [COMMAND_EXECUTION]: The skill includes shell commands for git history cleaning (
git filter-branch) and Cloudflare secret management (npx wrangler secret put). These are standard developer tools and are presented appropriately within the context of security remediation and configuration.
Audit Metadata