secret-scanner
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is defensive security. It provides instructions and patterns to help the agent identify and prevent the exposure of secrets like API keys and database credentials.
- [CREDENTIALS_UNSAFE]: The skill contains example API keys (e.g., 'sk_live_1234567890abcdef', 'AKIAIOSFODNN7EXAMPLE'). These are clearly documented as placeholders and examples for detection logic rather than functional or sensitive credentials. The skill explicitly promotes the use of
.envfiles and.gitignore, which are standard industry best practices for secret management. - [COMMAND_EXECUTION]: The skill mentions shell commands for git operations and secret rotation (
git filter-branch,echo,git commit). These are documented as educational guidance for the user to handle secret exposure and do not involve automated or malicious execution by the agent. - [FRONTMATTER_RULE]: The YAML frontmatter restricts tool access to 'Read' and 'Grep', which is consistent with the skill's stated purpose of scanning files for patterns.
Audit Metadata