secure-credential-setup
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell command templates for users to execute locally to store credentials. These templates follow security best practices, such as using
stty -echoto prevent secrets from being visible on screen during entry andtrapto ensure terminal settings are restored if the process is interrupted. - [DATA_EXFILTRATION]: The skill is explicitly designed to prevent data exfiltration. It instructs the agent to never request secrets in chat and provides methods to verify credential validity using 'harmless' API probes that do not leak secret metadata.
- [SAFE]: The implementation includes defensive measures against common terminal pitfalls, such as unsetting sensitive variables (
unset API_KEY) after use and warning the user about potential process-list exposure on macOS when using specific CLI arguments.
Audit Metadata