security-secrets-management
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a comprehensive educational resource for secrets management best practices, covering lifecycle management, rotation strategies, and secure storage implementation.
- [EXTERNAL_DOWNLOADS]: Documents installation procedures for verified security tools including GitLeaks, TruffleHog, and GitGuardian (ggshield) via official channels such as Homebrew, Go install, and Pip. These are well-known tools from reputable developers.
- [COMMAND_EXECUTION]: Includes standard CLI commands for performing secret scans and managing credentials across major cloud providers (AWS, GCP, Azure) and HashiCorp Vault. All commands are illustrative of legitimate administrative and security operations.
Audit Metadata