secret-scanner
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
gitleaksbinary locally viachild_process.spawnto perform repository scanning. This follows secure coding practices by using argument arrays instead of shell execution. - [EXTERNAL_DOWNLOADS]: The documentation references installation of
gitleaksthrough trusted channels such as Homebrew, Go, and Docker. - [DATA_EXFILTRATION]: The skill processes sensitive information but includes a
redactSecretmechanism to mask secrets in the output report, and it contains no code to transmit data over the network.
Audit Metadata