secrets-management
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to recommend and execute local security scanning utilities such as Trivy, Gitleaks, and git-secrets on the project directory to detect credential leaks.\n- [DATA_EXFILTRATION]: The skill is designed to identify and secure sensitive file patterns, including environment files (.env), private keys (.pem, .key), and credential stores. This activity is part of its core protective functionality, and no unauthorized data exfiltration patterns were detected.\n- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it ingests and processes content from potentially untrusted project files (Dockerfiles, Kubernetes manifests, CI/CD configs) using tools like Grep and Read.\n
- Ingestion points: Local project source code and configuration files (SKILL.md).\n
- Boundary markers: None identified.\n
- Capability inventory: Read, Grep, Glob, Bash, Edit, Write (SKILL.md).\n
- Sanitization: No explicit sanitization or filtering of file content before processing is mentioned.
Audit Metadata