doppler
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
doppler run -- <command>to execute shell commands with environment variables injected from the Doppler secret store.\n- [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories from Doppler (doppler.com,github.com/DopplerHQ/cli), which are well-known services for secrets management.\n- [DATA_EXFILTRATION]: The skill facilitates the transfer of secrets from Doppler to other platforms such as Cloudflare (wrangler) and Fly.io (flyctl). These operations are documented as standard deployment workflows to well-known infrastructure providers.
Audit Metadata