lindy-multi-env-setup

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation provides legitimate examples for using secret management CLI tools including aws secretsmanager, gcloud secrets, and gh secret to securely store environment credentials.
  • [SAFE]: The skill correctly identifies and separates environment-specific credentials. It provides placeholders for API keys and webhook secrets while instructing the user to use secure secret stores rather than hardcoding values.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where configuration is ingested from environment variables and local JSON files across SKILL.md and references/implementation.md. These inputs are used to construct network requests via the requests library. To mitigate risks, the skill explicitly demonstrates the use of the zod library for schema validation and sanitization of these inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:47 AM
Security Audit — agent-trust-hub — lindy-multi-env-setup