env-setup-wizard
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional content and code templates for environment configuration. It includes a dedicated section on security best practices, explicitly advising against committing secrets to version control and recommending the use of professional secret management services.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve the management and processing of environment configuration files, which represents an external data ingestion surface.
- Ingestion points: .env, .env.local, and other project configuration files referenced in the instructions (SKILL.md).
- Boundary markers: The skill does not define specific delimiters for separating environment data from instruction context.
- Capability inventory: The skill focus is on file structure and code generation; it does not possess or utilize capabilities for network communication, arbitrary command execution, or subprocess management.
- Sanitization: The skill mitigates risks by recommending the implementation of strict type-safe validation schemas using Zod and T3 Env, which ensures that environment data is parsed and validated before application use.
Audit Metadata