12-factor-app
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and best practice guidelines for cloud-native development. It does not contain executable code or tools that perform operations on the host system or network.
- [EXTERNAL_DOWNLOADS]: The documentation references well-known services and repositories such as 12factor.net, GitHub, Heroku, Kubernetes, and Docker. These are reputable sources and are used for reference purposes only.
- [CREDENTIALS_UNSAFE]: The skill explicitly teaches how to handle credentials securely using environment variables and secret managers. Examples of hardcoded secrets are used only in 'Incorrect' demonstrations and use standard dummy values (e.g., 'EXAMPLEKEY').
- [COMMAND_EXECUTION]: The skill provides examples of using CLI tools like
kubectl,heroku, anddocker. These are presented as part of standard operational procedures for cloud-native applications and are not invoked by the skill itself.
Audit Metadata