environment-secrets
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured and secure methods for managing environment variables and secrets.
- [SAFE]: It implements a strong security boundary by ensuring the agent can only check for the existence of secrets (via
viewEnvVars) but cannot read their plaintext values. - [SAFE]: It enforces a secure credential management workflow by requiring the use of
requestEnvVar, which pauses execution and requires manual user input for sensitive tokens, preventing the agent from hardcoding or directly writing secrets. - [SAFE]: The skill includes explicit warnings and restrictions against modifying runtime-managed variables (e.g.,
REPLIT_DOMAINS,DATABASE_URL), protecting critical infrastructure configuration.
Audit Metadata