dotenv
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies and documents the official installation sources for the
dotenvxutility, including thedotenvx.shdomain and standard package registries such as npm, yarn, and pnpm.- [REMOTE_CODE_EXECUTION]: The skill includes documentation for installing thedotenvxCLI via a shell-piped remote script (curl -fsS https://dotenvx.sh/ | sh). This is an established installation method for this developer tool.- [COMMAND_EXECUTION]: Instructions describe the command substitution feature ofdotenvx, which allows the execution of shell commands (e.g.,$(whoami)) within.envfiles to dynamically set environment variable values at runtime.
Audit Metadata