evernote-multi-env-setup

Warn

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The ConfigLoader class in references/implementation-guide.md implements dynamic loading of configuration files using a computed path: require(./${this.env}). This behavior is controlled by the NODE_ENV environment variable.
  • [CREDENTIALS_UNSAFE]: The references/implementation-guide.md file contains several hardcoded placeholder credentials for development environments, including:
  • SESSION_SECRET=dev-secret-not-secure in the environment variable examples.
  • POSTGRES_PASSWORD: postgres within the docker-compose.yml configuration.
  • Partial token examples like EVERNOTE_DEV_TOKEN=S=s1:U=... in SKILL.md.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 9, 2026, 03:44 AM