env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python auditing script (
scripts/env_auditor.py) and several shell scripts for local repository analysis. These tools perform read-only scans of the filesystem to detect hardcoded credentials and configuration issues. - [PERSISTENCE]: The documentation provides a script to install a git pre-commit hook in the
.git/hooks/directory. This is used to automatically run secret detection before code is committed, representing a standard defensive security measure rather than a malicious persistence attempt. - [INDIRECT_PROMPT_INJECTION]: The secret scanning logic processes untrusted data from local files. While this creates a potential injection surface where malicious instructions could be embedded in scanned files, the script is limited to pattern matching and snippet extraction, and does not execute the data it processes. Findings: 1. Ingestion points:
scripts/env_auditor.py(file scanning). 2. Boundary markers: Absent in the auditing script's output. 3. Capability inventory: Local file read, stdout write. 4. Sanitization: Snippets are truncated to 180 characters to limit data exposure.
Audit Metadata