agentsecrets
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
agentsecretsCLI binary to manage secret lifecycles, agent identities, and perform authenticated network requests. All sensitive operations are handled through this local binary. - [EXTERNAL_DOWNLOADS]: The agent fetches documentation and search results from the official service domain at
https://agentsecrets.theseventeen.coto obtain operational guidance. - [SAFE]: The architecture utilizes zero-knowledge principles where secrets are encrypted client-side (AES-256-GCM) with keys derived from the user's password (Argon2id), ensuring the agent model never processes plaintext credentials.
- [SAFE]: A workspace-level domain allowlist is enforced to restrict outbound API calls. Modifications to this allowlist require manual user password entry, preventing autonomous privilege escalation or unauthorized data access by the agent.
Audit Metadata