skills/openlark/skills/dotenv/Gen Agent Trust Hub

dotenv

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill identifies and documents the official installation sources for the dotenvx utility, including the dotenvx.sh domain and standard package registries such as npm, yarn, and pnpm.- [REMOTE_CODE_EXECUTION]: The skill includes documentation for installing the dotenvx CLI via a shell-piped remote script (curl -fsS https://dotenvx.sh/ | sh). This is an established installation method for this developer tool.- [COMMAND_EXECUTION]: Instructions describe the command substitution feature of dotenvx, which allows the execution of shell commands (e.g., $(whoami)) within .env files to dynamically set environment variable values at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 04:16 AM
Security Audit — agent-trust-hub — dotenv