secrets-management
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for secret management. All code snippets provided are educational examples of how to interact with services like AWS Secrets Manager, HashiCorp Vault, and Kubernetes Secrets.
- [CREDENTIALS_UNSAFE]: While the file contains strings like 'DATABASE_URL=postgresql://user:password@localhost:5432/db', these are explicitly marked as placeholder examples for
.envfiles and include instructions to never commit real values. No actual sensitive credentials or private keys are exposed. - [OBFUSCATION]: The skill includes Base64-encoded strings in the Kubernetes Secrets manifest section (e.g., 'cG9zdGdyZXNxbDovL3VzZXI6cGFzc3dvcmRAbG9jYWxob3N0OjU0MzIvZGI='). Decoding these reveals the same placeholder strings used elsewhere in the documentation ('postgresql://user:password@localhost:5432/db'), which is a legitimate use case for demonstrating how Kubernetes Opaque secrets are structured.
Audit Metadata