opendeploy-env

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the @opendeploydev/cli tool and standard npm commands to manage project configuration. These operations are restricted to the vendor's own CLI and are essential for the skill's stated purpose of environment variable management.
  • [SAFE]: Includes strong data protection instructions that prohibit the agent from printing secret values or passing them to non-OpenDeploy hosts. It enforces the use of key names only in transcripts to prevent accidental exposure.
  • [SAFE]: Implements safety checkpoints, such as requiring user confirmation for destructive actions (e.g., deleting database keys) and providing clear guidance on separating runtime and build-time environment variables.
  • [SAFE]: Provides secure workflows for handling sensitive AI provider keys by deferring to a dedicated, managed provisioning service rather than requesting values directly in plain text.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 07:17 AM
Security Audit — agent-trust-hub — opendeploy-env