use-native-credential-proxy
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's operations are consistent with its stated purpose of managing local credentials and updating the project source code.- [EXTERNAL_DOWNLOADS]: Fetches and merges code from the official author's repository at
https://github.com/qwibitai/nanoclaw.git. As this repository is the primary source for the tool being modified and belongs to the identified vendor, this is a legitimate update mechanism.- [COMMAND_EXECUTION]: Utilizes standard development and system commands (git, npm, systemctl, launchctl) to apply code changes and manage local services. These operations are transparent and follow routine software maintenance workflows.- [CREDENTIALS_UNSAFE]: Encourages the secure handling of sensitive data by instructing the user to store API keys and tokens in a.envfile. This avoids hardcoding secrets and adheres to standard practices for environment-based secret management.
Audit Metadata