secrets-handling-review
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and serves as a security auditing tool. It provides a structured workflow for identifying and mitigating secret exposure in other skills and scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content such as logs, scripts, and third-party skills, which represents a surface for indirect prompt injection. However, the skill possesses no functional capabilities (no file writing, command execution, or network tools) that could be exploited by such an injection, rendering the risk negligible.
- Ingestion points: Processes skills, scripts, examples, logs, templates, and tool instructions.
- Boundary markers: None explicitly defined in the instructional text.
- Capability inventory: No tool usage or script execution capabilities are requested or provided.
- Sanitization: No specific sanitization methods are described, but the output is strictly defined as a security recommendation report.
Audit Metadata