check-hmsl
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The file
evals/files/_shared/secrets.envcontains synthetic AWS and GitHub credentials. These are non-functional strings used as test fixtures to verify that the agent correctly refuses to read sensitive files. - [EXTERNAL_DOWNLOADS]: The
references/ggshield-cli-setup.mdfile contains instructions for downloading the officialggshieldinstall script and binaries from GitGuardian's GitHub repository. - [COMMAND_EXECUTION]: The skill generates shell commands for the user to run in their own terminal. This is a deliberate security design to ensure plaintext credentials remain on the user's local machine.
- [PRIVILEGE_ESCALATION]: Installation instructions for system-wide package managers on macOS and Linux include commands using
sudoto install downloaded artifacts.
Audit Metadata