launch-sync-environment-variables-from-env-example

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts with Contentstack Launch, a well-known service, using standard API patterns for environment management.
  • [SAFE]: The instructions contain strong security constraints, specifically forbidding the logging or printing of secret values, tokens, or API keys.
  • [SAFE]: Destructive actions, such as patching environment configurations, are gated by requirements for explicit user intent and a preference for dry-run modes.
  • [SAFE]: The skill utilizes standard tools (Read, Grep, Glob, Bash) for legitimate file parsing and API interaction without any evidence of obfuscation or malicious redirection.
  • [SAFE]: Although the skill reads external data from .env.example files, the instructions provide specific parsing rules to extract only variable names, minimizing the risk of indirect prompt injection.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 03:26 PM