glean-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a defensive technical guide for enterprise search security. It includes secure code patterns for HMAC-SHA256 webhook signature verification and robust input validation using the Zod library.
- [SAFE]: The instructions explicitly emphasize the importance of secret management, directing users to store sensitive tokens in secret managers rather than hardcoding them or exposing them in frontend code.
- [SAFE]: No malicious patterns, such as obfuscation, unauthorized network operations, or credential exfiltration, were identified in the skill content.
- [SAFE]: The documentation includes practical remediation guidance, such as a security checklist and redaction logic for logging sensitive fields.
Audit Metadata