render-keyvalue
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and standardized code examples for connecting to Render's Key Value service using well-known libraries in Node.js, Python, Ruby, and Go. All connection strings and passwords use generic placeholders (e.g., 'PASSWORD', 'red-xxx') rather than hardcoded credentials.
- [DATA_EXPOSURE]: The skill correctly emphasizes using environment variables (e.g., 'REDIS_URL') to handle sensitive connection data, following security best practices for credential management.
- [COMMAND_EXECUTION]: Benign command-line examples are provided for local troubleshooting using 'redis-cli', which is standard developer tooling for this service type.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes processing structured Blueprint configuration data (YAML), it lacks the dangerous execution capabilities or subprocess calls that would create a vulnerability surface for indirect prompt injection attacks.
Audit Metadata