ecc-claude-engineering-env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow where the agent reads instructions from an external reference file (references/upstream-path.txt) and translates them into tool-backed actions. This creates an indirect prompt injection surface if the referenced content is compromised.
- Ingestion points: Reads content from paths specified in references/upstream-path.txt.
- Boundary markers: The instructions do not define delimiters or specific markers to prevent the agent from obeying instructions embedded in the reference data.
- Capability inventory: The workflow explicitly calls for 'OpenClaw tool-backed steps' and 'incremental execution', providing a path for data to influence tool usage.
- Sanitization: There are no verification or filtering steps defined for the content extracted from the upstream references.
- [NO_CODE]: No executable script files were found within the skill package. The logic is entirely contained within markdown instructions and text-based pointers.
Audit Metadata