cli-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for configuration management by recommending the use of environment variables for sensitive data and providing patterns to exclude secrets from serialized configuration files.- [COMMAND_EXECUTION]: The provided code examples include file system operations such as directory creation (fs::create_dir_all) and configuration file writing (fs::write). These operations are restricted to standard user and system configuration paths (XDG spec) and are necessary for the skill's stated purpose of configuration management.- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting untrusted data from external files and environment variables. It mitigates associated risks by providing a 'Configuration Validation' pattern that performs checks (e.g., port ranges, worker counts) before the application uses the configuration data.
- Ingestion points: Configuration files (SKILL.md) and environment variables (SKILL.md).
- Boundary markers: None identified.
- Capability inventory: File system writes and directory creation (fs::write, fs::create_dir_all in SKILL.md).
- Sanitization: Includes a validation step (Config::validate) to filter and verify external configuration input.
Audit Metadata