distribution-security
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive security guide focusing on defense-in-depth, PII protection, and secure packaging. No malicious code or suspicious behaviors were found.
- [CREDENTIALS_UNSAFE]: Includes regex patterns for detecting various secrets (API keys, connection strings, JWT, private keys). These are explicitly labeled as detection signatures and do not contain actual hardcoded credentials.
- [COMMAND_EXECUTION]: Mentions standard development commands and APIs, such as Azure CLI (
az resource list) and VS Code'sopenExternal, in the context of security auditing and UI communication patterns.
Audit Metadata