atmos-secrets
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
atmos secretcommand family to perform administrative tasks including initialization, setting, and retrieving secrets. It also includes commands likeatmos secret execandatmos secret shellwhich inject sensitive values into the execution environment of other processes. - [DATA_EXFILTRATION]: The skill handles sensitive information by design. It includes mechanisms for downloading secrets to local files (
atmos secret pull) and retrieving them for inspection (atmos secret get). Potential risks are mitigated by documentation instructions to enable masking and repository policies against committing unencrypted secret files. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external secret backends (e.g., Vault, 1Password, AWS SSM). While these represent external data sources that could theoretically contain malicious content, the usage is confined to the primary purpose of the tool and follows established secret management patterns.
Audit Metadata