gamma-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices for secret management by instructing users to utilize dedicated secret managers (AWS Secrets Manager or Vault) for production environments and explicitly warns against committing sensitive keys to version control.
- [SAFE]: The inclusion of environment guards, such as the
requireProductionandblockProductionfunctions, demonstrates a focus on preventing accidental execution of destructive operations in unintended environments. - [SAFE]: The provided CI/CD configuration follows standard security patterns, using GitHub Actions environments and secrets to isolate credentials between staging and production pipelines.
- [SAFE]: The skill uses well-known and legitimate dependencies for secret management and environment handling.
- [SAFE]: Analysis of data ingestion points (environment variables and local configuration files) indicates that while the skill processes external data, it does so within the context of a standard developer workflow without evidence of malicious redirection or exfiltration patterns.
Audit Metadata