stash-edge
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for developers to integrate encryption into edge environments using the
@cipherstash/stack/wasm-inlinepackage. - [CREDENTIALS_UNSAFE]: The document references sensitive environment variables such as
CS_CLIENT_KEYandCS_CLIENT_ACCESS_KEY. However, it follows security best practices by explicitly instructing users to store these in platform-native secret managers (e.g., Supabase secrets, Wrangler secrets) and warns against committing them to version control. - [EXTERNAL_DOWNLOADS]: The skill mentions importing and installing the
@cipherstash/stacklibrary via standard package managers (NPM, Denonpm:specifiers). These references point to legitimate vendor-owned resources necessary for the described functionality. - [COMMAND_EXECUTION]: Examples of CLI usage (e.g.,
stash env,supabase secrets set) are provided as instructions for the user to configure their environment manually. These commands are relevant to the primary purpose of the skill and do not represent autonomous or hidden execution by the agent.
Audit Metadata