credential-lifecycle-and-rotation

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely instructional and focused on defensive security practices. It provides a framework for evaluating an agent's ability to handle complex credential rotation scenarios securely.
  • [CREDENTIALS_SAFE]: The instructions explicitly forbid the reading of live credentials, the use of hardcoded secrets, or the display of sensitive values. It promotes the use of synthetic authority for testing purposes rather than real production data.
  • [COMMAND_EXECUTION]: While the evaluation prompts list tools like Read, Glob, and Grep, these are used for analyzing the repository structure during evaluation and do not facilitate arbitrary command execution or system modification.
  • [DATA_EXFILTRATION]: No network operations or data transfer patterns were identified. The skill focuses on local design and policy review.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:21 PM