evernote-multi-env-setup
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The
ConfigLoaderclass inreferences/implementation-guide.mdimplements dynamic loading of configuration files using a computed path:require(./${this.env}). This behavior is controlled by theNODE_ENVenvironment variable. - [CREDENTIALS_UNSAFE]: The
references/implementation-guide.mdfile contains several hardcoded placeholder credentials for development environments, including: SESSION_SECRET=dev-secret-not-securein the environment variable examples.POSTGRES_PASSWORD: postgreswithin thedocker-compose.ymlconfiguration.- Partial token examples like
EVERNOTE_DEV_TOKEN=S=s1:U=...inSKILL.md.
Audit Metadata