skills/cipherstash/stack/stash-auth/Gen Agent Trust Hub

stash-auth

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a canonical documentation reference for authentication strategies. It includes critical security warnings regarding client lifetimes, correctly identifying the cross-tenant data hazards associated with sharing user-scoped clients.- [SAFE]: The skill identifies sensitive configuration paths (e.g., ~/.cipherstash/auth.json, ~/.cipherstash/secretkey.json) and correctly instructs agents and application code to avoid direct access to these files, advocating for the use of official SDK strategies and the stash CLI instead.- [SAFE]: It provides clear guidance on managing sensitive environment variables (CS_CLIENT_KEY, CS_CLIENT_ACCESS_KEY) and advises on secure deployment practices using stash env to pipe secrets directly into stores.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 09:18 PM