skills/cipherstash/stack/stash-auth/Gen Agent Trust Hub

stash-auth

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a canonical reference for authenticating to CipherStash services. It provides legitimate guidance on using the @cipherstash/stack and @cipherstash/auth libraries, which are the official vendor packages.
  • [COMMAND_EXECUTION]: The documentation mentions standard setup commands for the CipherStash CLI, such as npx stash auth login and stash env. These are intended for user-driven environment configuration and credential discovery.
  • [CREDENTIALS_UNSAFE]: While the skill mentions sensitive items like CS_CLIENT_KEY and CS_CLIENT_ACCESS_KEY, it treats them as environment variables rather than hardcoding them. It also correctly identifies these as secrets and explicitly warns that agents should not attempt to read internal configuration files (~/.cipherstash/auth.json) directly, promoting safe API-based interaction instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 12:54 PM
Security Audit — agent-trust-hub — stash-auth