env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill's components align with its stated purpose of improving secret management hygiene.- [COMMAND_EXECUTION]: The skill includes
scripts/env_auditor.py, a local auditing script that reads files and reports findings to the console. It also provides bash snippets for environment validation and git hooks. All execution is local, user-initiated, and transparently documented.- [EXTERNAL_DOWNLOADS]: The documentation references official repositories for reputable security tools, such as Gitleaks and Yelp's detect-secrets. These are well-known services and the references are provided as part of standard security best practices.- [DATA_EXFILTRATION]: While the skill is designed to read sensitive files (secrets and.envfiles), the scanning logic is entirely local. No network operations or data transmission patterns were found in the auditing scripts.
Audit Metadata