secrets-management
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure guidance on managing API keys, tokens, and other sensitive credentials. It correctly identifies and warns against major security anti-patterns such as committing secrets to source control or using weak encryption methods. All commands and tools mentioned (e.g., AWS Secrets Manager, HashiCorp Vault, SOPS, TruffleHog) are industry-standard utilities for the described purpose. No code execution, data exfiltration, or obfuscation attempts were found.
Audit Metadata