glean-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The provided TypeScript diagnostic script interacts with official Glean API endpoints (api.glean.com). These network operations are intended for health checks and do not represent unauthorized data exfiltration.
- [CREDENTIALS_UNSAFE]: The skill appropriately handles sensitive data by instructing users to utilize environment variables and secret managers for the GLEAN_API_KEY, rather than embedding them in source files.
- [COMMAND_EXECUTION]: While the skill frontmatter restricts bash access to npm and curl, the instructions and scripts do not invoke arbitrary or dangerous system commands.
Audit Metadata