wizard
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill generates bash scripts designed to manage sensitive credentials (such as API keys) by writing them to local
.envfiles or using thegh(GitHub CLI) tool to set secrets. This follows industry standard practices for secret management. - [SAFE]: The generated scripts use secure input methods for sensitive data, such as
read -rs(ask_secret), ensuring that passwords and keys are not echoed to the terminal during entry. - [SAFE]: The tool targets well-known and trusted services like GitHub for secret storage and includes example configurations for Stripe, which is a well-known service. No unexpected or suspicious third-party network requests are performed by the agent itself.
- [COMMAND_EXECUTION]: The skill facilitates the creation and execution of local bash scripts. This is the primary intended purpose of the skill and is performed with the user's oversight, as the script is generated and then must be manually reviewed and run by the user.
Audit Metadata