dev-workflow

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions installing project dependencies via pip install -r requirements.txt, which is a standard procedure for Python development.
  • [COMMAND_EXECUTION]: Instructions involve executing routine development and security commands such as pip, pytest, snyk, and talisman.
  • [SAFE]: The skill includes an explicit security warning to use local credentials and never commit real authentication tokens (APIKEY, DELIVERYTOKEN) to the repository.
  • [SAFE]: The recommended workflow proactively integrates security tools including Talisman for secret detection and Snyk for dependency vulnerability scanning.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 08:59 PM
Security Audit — agent-trust-hub — dev-workflow