glean-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements environment isolation by utilizing distinct API tokens and datasource suffixes for sandbox, staging, and production environments, which prevents cross-environment data contamination.
- [SAFE]: Security best practices for credential management are encouraged through the use of
.envfiles and environment variables (GLEAN_API_TOKEN_DEV, etc.) rather than hardcoding secrets. - [SAFE]: Network operations via
curltarget legitimate and well-known service endpoints for Glean (e.g.,sandbox.glean.com,staging.glean.com,app.glean.com) for the intended purpose of indexing and search validation. - [SAFE]: The instructions explicitly mandate the redaction of sensitive information such as credentials, documents, and real identities from promotion receipts and logs, reducing the risk of accidental data exposure.
Audit Metadata