env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to manage sensitive environment variables and credentials, but it includes explicit redaction logic in its diagnostic scripts to prevent the accidental exposure of secret values in terminal output or log files.
- [COMMAND_EXECUTION]: The skill utilizes local CLI tools and shell scripts to interact with the environment. These interactions are limited to standard file operations and the use of well-known, trusted secrets management platforms such as AWS SSM, HashiCorp Vault, and Doppler.
- [DYNAMIC_EXECUTION]: The integration documentation provides examples using the shell
evalcommand to load secrets from external managers into the active environment. This is an industry-standard practice for secret injection and is intended for use within the user's controlled shell session. - [INDIRECT_PROMPT_INJECTION]: Although the skill parses external data like source code and .env files, it incorporates safe parsing logic and clear instructions for the agent to seek user confirmation before performing tasks, which mitigates risks associated with untrusted data ingestion.
Audit Metadata