env-secrets-manager

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats or malicious patterns were identified. The skill's components align with its stated purpose of improving secret management hygiene.- [COMMAND_EXECUTION]: The skill includes scripts/env_auditor.py, a local auditing script that reads files and reports findings to the console. It also provides bash snippets for environment validation and git hooks. All execution is local, user-initiated, and transparently documented.- [EXTERNAL_DOWNLOADS]: The documentation references official repositories for reputable security tools, such as Gitleaks and Yelp's detect-secrets. These are well-known services and the references are provided as part of standard security best practices.- [DATA_EXFILTRATION]: While the skill is designed to read sensitive files (secrets and .env files), the scanning logic is entirely local. No network operations or data transmission patterns were found in the auditing scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 02:06 AM
Security Audit — agent-trust-hub — env-secrets-manager