env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides code examples and guidelines for secure secrets management, including environment validation using Zod, integration with AWS Secrets Manager, HashiCorp Vault, and Doppler.\n- [SAFE]: Includes correct security patterns for local development, such as documenting which files should be ignored in
.gitignore(.env, .env.local, .pem, .key) and providing an.env.examplewith placeholders.\n- [SAFE]: Implements secure local encryption usingaes-256-gcmwithscryptkey derivation, which is a standard best practice for file-level encryption.\n- [SAFE]: The code for AWS and Vault integration uses official libraries (@aws-sdk/client-secrets-manager,node-vault) and implements defensive patterns like caching with TTL (Time-to-Live).
Audit Metadata