sgc-install-ai
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security boundaries by explicitly forbidding the storage of sensitive data such as API keys, tokens, or private endpoints in source control, configuration files, or user-facing interfaces.
- [SAFE]: The workflow includes a mandatory validation step (Step 4) that instructs the agent to verify that no credentials, internal routes, or provider stack traces are exposed in network payloads or logs.
- [SAFE]: A security-focused reference file (
references/user-config.md) is provided to guide safe storage of portable preferences while excluding sensitive environment variables. - [SAFE]: The included validation script (
scripts/validate_skill.py) performs automated hygiene checks, including scanning for private absolute user paths and unresolved placeholders. - [SAFE]: The skill uses an adapter pattern to abstract AI service providers, preventing the exposure of underlying infrastructure details to the frontend application.
Audit Metadata