stash-auth
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a canonical reference for authenticating to CipherStash services. It provides legitimate guidance on using the
@cipherstash/stackand@cipherstash/authlibraries, which are the official vendor packages. - [COMMAND_EXECUTION]: The documentation mentions standard setup commands for the CipherStash CLI, such as
npx stash auth loginandstash env. These are intended for user-driven environment configuration and credential discovery. - [CREDENTIALS_UNSAFE]: While the skill mentions sensitive items like
CS_CLIENT_KEYandCS_CLIENT_ACCESS_KEY, it treats them as environment variables rather than hardcoding them. It also correctly identifies these as secrets and explicitly warns that agents should not attempt to read internal configuration files (~/.cipherstash/auth.json) directly, promoting safe API-based interaction instead.
Audit Metadata