vault
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Vault binary and GPG signing keys from official HashiCorp domains (releases.hashicorp.com and apt.releases.hashicorp.com).
- [COMMAND_EXECUTION]: Instructions use standard system package managers (apt, brew, choco) and commands (sudo, mv, unzip) to install and configure the Vault CLI tool.
- [CREDENTIALS_UNSAFE]: The documentation references standard environment variables (VAULT_TOKEN) and local configuration files (~/.vault-token), while providing explicit safety guardrails against hardcoding credentials and promoting the use of short-lived tokens.
Audit Metadata