secrets-management
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official and widely-used GitHub Actions from trusted organizations, including 'hashicorp/vault-action' and 'aws-actions/configure-aws-credentials'.
- [EXTERNAL_DOWNLOADS]: The skill utilizes official container images for tools such as HashiCorp Vault ('vault:latest') and TruffleHog ('trufflesecurity/trufflehog:latest') for security operations.
- [COMMAND_EXECUTION]: The skill provides standard command-line examples for managing secrets via 'vault' and 'aws-cli' tools, and for performing security audits with 'trufflehog'.
- [SAFE]: The skill explicitly emphasizes security best practices, such as masking secrets in CI/CD logs using platform-specific commands like '::add-mask::', and implementing automated secret rotation logic.
Audit Metadata