glean-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill uses
process.env.GLEAN_INDEXING_TOKENandprocess.env.GLEAN_ANALYTICS_TOKENfor API authentication. This follows the safe practice of using environment variables rather than hardcoding secrets. - [EXTERNAL_DOWNLOADS]: The skill references documentation and API endpoints at
developers.glean.comandcustomer-be.glean.com. These are well-known, legitimate services for the Glean platform and do not constitute a security risk. - [DATA_EXFILTRATION]: Data transmission is limited to the official
glean.combackend for the purpose of indexing. ThestripPIIfunction performs redaction of sensitive identifiers (emails, phones, SSNs) before upload to minimize data exposure. - [COMMAND_EXECUTION]: While the frontmatter allows
Bashtools, the content itself does not execute arbitrary shell commands or shell scripts. - [SAFE]: The skill is authored by a recognized vendor (Jeremy Longshore) and its behavior matches its stated purpose of secure data handling for enterprise search.
Audit Metadata