groq-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
groq-sdklibrary from the official npm registry and usescurlto interact with the well-knownapi.groq.comendpoint for health checks and rate-limit monitoring. - [COMMAND_EXECUTION]: Contains implementation examples using official CLI tools from trusted providers, including AWS Secrets Manager, GCP Secret Manager, HashiCorp Vault, and GitHub CLI, to securely handle environment variables and secrets.
- [DATA_EXPOSURE]: Includes a diagnostic script that logs the first 8 characters of the API key; this is a common developer practice for verifying the correct key is loaded without exposing the full secret.
- [SAFE]: Follows security best practices by recommending
.env.localfor development and dedicated secret managers for production, ensuring sensitive credentials are not hardcoded or committed to version control.
Audit Metadata