setup-env
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing a step-by-step guide for development environment setup.
- [DATA_EXPOSURE]: The skill correctly advises users to manage environment variables using
.envfiles and explicitly warns against committing secrets or using invented placeholder values, following security best practices. - [COMMAND_EXECUTION]: While the skill mentions commands like
npm ciandpoetry install, these are provided as instructional examples for the agent to use within a project context and do not represent autonomous malicious execution. - [EXTERNAL_DOWNLOADS]: Includes a reference to the author's official GitHub repository (HermeticOrmus/setup-env-skills), which is a standard resource link for documentation.
Audit Metadata