glean-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and boilerplate code for setting up a local development environment for Glean. It emphasizes using mock search responses (
src/dev/mocks.ts) and sandbox environments to avoid exposing production data. - [SAFE]: Environment variable management follows standard practices (using
.env.exampleand.env). It correctly advises users to set credentials in their own local.envfiles which are not part of the skill's code. - [SAFE]: Dependency management uses standard package managers (
npm install). The packages listed (express, axios, dotenv, tsx, typescript, vitest, supertest) are well-known, legitimate development tools. - [SAFE]: The instructions prioritize data protection, recommending the use of bounded fixtures, opaque IDs in logs, and redacting sensitive information from output receipts.
Audit Metadata