secrets-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill consists of educational content, code templates, and configuration examples for secrets management tools (Vault, AWS Secrets Manager, etc.). The instructions follow industry best practices for credential handling.
- [EXTERNAL_DOWNLOADS]: The skill references official GitHub Actions from trusted organizations and well-known services, including HashiCorp and AWS. It also utilizes official Docker images for Vault and TruffleHog for security scanning workflows.
- [CREDENTIALS_UNSAFE]: Code snippets use standard instructional placeholder values (e.g., 'root', 'secret', 'super-secret-password') for local development server demonstrations. These are clearly marked as examples and do not represent actual hardcoded sensitive credentials.
Audit Metadata