secret-protection
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The implementation section includes a configuration example that references the official Gitleaks repository on GitHub, which is a well-known open-source tool for secret detection.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides a
SecretScannerimplementation for redacting secrets from text. \n - Ingestion point:
SecretScanner.redact_outputinSKILL.mdprocesses untrusted text input. \n - Boundary markers: No delimiters or warnings are present for the input data. \n
- Capability inventory: No dangerous capabilities such as file operations, network access, or command execution are present in the provided code. \n
- Sanitization: The scanner redacts sensitive patterns from the text to prevent credential exposure.
Audit Metadata