google-cloud-secret-manager-js
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the official
@google-cloud/secret-managerpackage via standard package managers. - [COMMAND_EXECUTION]: Includes a local bash script
scripts/create-secret-module.shdesigned to scaffold a configuration module. The script performs local file writes to a user-specified path and does not involve network operations or privilege escalation. - [DATA_EXFILTRATION]: Provides explicit guidance against data exposure, specifically instructing users never to log secret values, environment variables, or commit service account JSON keys to version control.
- [INDIRECT_PROMPT_INJECTION]: The generated code retrieves data from Google Cloud Secret Manager. While this data is external, the skill acts as a pass-through retrieval mechanism and does not perform unsafe operations (like
eval) on the retrieved content.
Audit Metadata