env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for secure secret management. It includes correctly implemented encryption patterns using AES-256-GCM and standard key derivation (scrypt).
- [SAFE]: It integrates with well-known and trusted third-party services including AWS Secrets Manager, HashiCorp Vault, and Doppler using their official or standard community SDKs.
- [SAFE]: The skill promotes security best practices by providing a
.gitignoretemplate to prevent accidental credential leakage and implementing environment variable validation using thezodlibrary. - [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. All network operations and file access patterns described are aligned with the skill's stated purpose of managing configuration and secrets.
Audit Metadata