dotenvx
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch the
dotenvxinstallation script from its official website,https://dotenvx.sh. - [REMOTE_CODE_EXECUTION]: The skill includes the official installation command that pipes a remote script directly to the shell (
curl -sfS https://dotenvx.sh | sh). This is the standard, documented method for installing the tool. - [COMMAND_EXECUTION]: The skill documents various CLI operations for secret management, including the use of
dotenvxfor encryption,sedfor file manipulation,gitfor version control, and the GitHub CLI (gh) for updating environment secrets.
Audit Metadata