secrets-management
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the
trufflehogsecret scanning tool from Docker Hub (trufflesecurity/trufflehog:latest). - [EXTERNAL_DOWNLOADS]: The skill utilizes official GitHub Actions from trusted organizations, including HashiCorp (
hashicorp/vault-action@v2) and Amazon Web Services (aws-actions/configure-aws-credentials@v4). - [COMMAND_EXECUTION]: Provides examples for executing shell commands using the Vault CLI, AWS CLI, and Docker to manage credentials and perform security audits within CI/CD environments.
- [DATA_EXFILTRATION]: Includes instructions for retrieving sensitive data from remote backends (Vault, AWS Secrets Manager). These instructions are documented alongside safety best practices, such as using
::add-mask::to prevent secret exposure in logs.
Audit Metadata