live-dev-config
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages GitHub and Vercel project configuration using official CLI tools (
gh,vercel). - [SAFE]: Credentials are collected via a local-only HTTP form (binding to
127.0.0.1) that saves secrets directly to a local.env.localfile. This prevents sensitive data from appearing in the agent's conversation logs or shell history. - [SAFE]: The skill includes security guidelines for the agent to avoid using
evalorsourceon environment files, instead using a dedicated Node.js utility to pipe secrets via stdin to the target tools. - [SAFE]: No remote code execution, data exfiltration, or obfuscation patterns were detected in the provided scripts.
Audit Metadata