skills/contentstack/contentstack-agent-skills/launch-sync-environment-variables-from-env-example/Gen Agent Trust Hub
launch-sync-environment-variables-from-env-example
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with Contentstack Launch, a well-known service, using standard API patterns for environment management.
- [SAFE]: The instructions contain strong security constraints, specifically forbidding the logging or printing of secret values, tokens, or API keys.
- [SAFE]: Destructive actions, such as patching environment configurations, are gated by requirements for explicit user intent and a preference for dry-run modes.
- [SAFE]: The skill utilizes standard tools (Read, Grep, Glob, Bash) for legitimate file parsing and API interaction without any evidence of obfuscation or malicious redirection.
- [SAFE]: Although the skill reads external data from
.env.examplefiles, the instructions provide specific parsing rules to extract only variable names, minimizing the risk of indirect prompt injection.
Audit Metadata