env-validator
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to locate and read sensitive configuration files including .env, .env.local, and .env.production (SKILL.md, Phase 1). Access to these sensitive paths is flagged as a data exposure risk. While this is the primary purpose of the skill, it involves accessing files that typically contain secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from .env files and source code, creating a surface for indirect prompt injection.
- Ingestion points: Reads .env files and greps source code throughout the project (SKILL.md, Phase 1).
- Boundary markers: None identified in the workflow or output reporting.
- Capability inventory: Limited to file reading and content grepping (Read and Grep tools). No network or file write operations are defined in the workflow.
- Sanitization: No sanitization or escaping is mentioned for the external content before it is included in the final validation report.
Audit Metadata