env-secrets-manager
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Python script
scripts/env_auditor.pyto scan for secrets and environment variable misconfigurations. This is an intended feature used for security auditing purposes.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it is designed to ingest and analyze untrusted content from local repositories. Malicious files within a scanned repository could attempt to influence the agent's behavior or findings during an audit. Mandatory Evidence Chain: 1. Ingestion points: Local repository files (as seen in README.md and SKILL.md); 2. Boundary markers: Not explicitly defined in the instructions; 3. Capability inventory: File system reading and execution of local auditing scripts; 4. Sanitization: No specific sanitization or validation of input file content is described.
Audit Metadata