zj-wizard
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a transparent bash template for creating interactive wizards. It employs security best practices for handling sensitive data, such as using hidden terminal input for passwords and keys (
ask_secret). - [SAFE]: Secret management for CI/CD is handled through the official GitHub CLI (
gh), a well-known and trusted service, ensuring that credentials are sent only to the user's authorized repository environment. - [SAFE]: File system operations are restricted to project configuration (e.g.,
.envupdates) and use atomic write patterns with temporary files to maintain file integrity. - [SAFE]: The skill uses standard, cross-platform system utilities (
xdg-open,open,explorer.exe) to open documentation and dashboard URLs in the user's browser, providing a transparent and user-driven workflow.
Audit Metadata