opendeploy-env
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
@opendeploydev/clitool and standardnpmcommands to manage project configuration. These operations are restricted to the vendor's own CLI and are essential for the skill's stated purpose of environment variable management. - [SAFE]: Includes strong data protection instructions that prohibit the agent from printing secret values or passing them to non-OpenDeploy hosts. It enforces the use of key names only in transcripts to prevent accidental exposure.
- [SAFE]: Implements safety checkpoints, such as requiring user confirmation for destructive actions (e.g., deleting database keys) and providing clear guidance on separating runtime and build-time environment variables.
- [SAFE]: Provides secure workflows for handling sensitive AI provider keys by deferring to a dedicated, managed provisioning service rather than requesting values directly in plain text.
Audit Metadata