supply-chain-security
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [Defensive Credential Handling]: The skill mandates that all credential access must route through a dedicated
AuthResolverand explicitly prohibits the use of raw environment variable reads for tokens, which helps prevent accidental credential leakage. - [Path Security Enforcement]: It requires all file path constructions to use a specific security utility, effectively mitigating the risk of directory traversal attacks by preventing ad-hoc path manipulation.
- [Safe File Deletion Gates]: The skill implements a centralized deletion chokepoint with multiple safety gates, ensuring that file cleanup operations are controlled and less prone to accidental data loss or unauthorized deletion.
- [Integrity Verification]: By enforcing a 'fail closed' policy for integrity and signature checks, the skill ensures that the system refuses to proceed if security verification cannot be confirmed, aligning with security best practices.
Audit Metadata