secrets-env-manager
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a template repository for implementing secret management best practices, including fail-fast validation and environment-specific scoping.
- [EXTERNAL_DOWNLOADS]: Integrates established security tools such as TruffleHog and Reviewdog's secret detector via GitHub Actions to automate the detection of hardcoded secrets.
- [COMMAND_EXECUTION]: Utilizes standard shell scripting within GitHub Actions to verify the presence of required environment variables and apply masking to sensitive values.
- [CREDENTIALS_UNSAFE]: Provides a documentation template (.env.example) that uses non-functional placeholders for common API services, which is the recommended approach for defining configuration requirements without exposing actual secrets.
Audit Metadata