replit-known-pitfalls
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes a local bash script designed to audit the source code for potential secrets and binding issues. This script only returns counts of matching files and does not execute remote code, download external scripts, or exfiltrate data.
- [SAFE]: The instructions demonstrate a strong security posture by repeatedly advising the agent to redact secret values, avoid requesting credentials, and stop before making any changes that would affect billing, availability, or production data.
- [SAFE]: All external resource links point to the official documentation of Replit, a well-known development platform service, which is considered a safe source.
- [SAFE]: The skill uses platform configuration (YAML frontmatter) to restrict the scope of tools to read-only or specific grep operations, adhering to the principle of least privilege.
Audit Metadata