api-key-support
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ripgrep(rg) utility to search the project directory for existing API key implementations. The command is restricted to the local filesystem and explicitly excludes common dependency and build directories likenode_modulesanddist. - [SAFE]: The instructions mandate high-standard security practices, including the use of cryptographic RNGs for key generation and the storage of key hashes rather than plaintext secrets.
- [PROMPT_INJECTION]: No attempts to override agent constraints or bypass safety guidelines were detected. The skill uses instructional language consistent with its stated purpose of managing credentials safely.
- [DATA_EXFILTRATION]: No network operations or external data transmissions are defined. The skill focuses entirely on local codebase analysis and modification.
Audit Metadata