configuration-management
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional material, code templates, and scripts for environment variable management and configuration validation.
- [CREDENTIALS_SAFE]: While sensitive variable names like
API_KEYandDATABASE_URLappear in.envtemplates, they use placeholders (e.g.,dev-api-key-12345,${DATABASE_URL}) or references to secret managers (AWS Secrets Manager, HashiCorp Vault), which follows security best practices. - [REMOTE_CODE_EXECUTION]: The skill contains logic for fetching remote configuration via
fetch()from a user-definedconfigServiceUrl. This is a documented design pattern for 'Remote Config' and does not involve executing arbitrary remote scripts or code. - [COMMAND_EXECUTION]: Includes a simple bash script
validate-schema.shfor schema validation logic, which is benign and scope-appropriate for a developer utility skill.
Audit Metadata