sample-app-strategy
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured workflow for auditing code repositories with a primary focus on security and maintenance standards.
- [SAFE]: It mandates the use of security tools for secret detection and dependency vulnerability scanning as the first step in its triage process, ensuring security issues are addressed before other business criteria.
- [SAFE]: The instructions enforce strict credential management by requiring the use of .env.example files and scoped, rotated sandbox keys for CI environments, which prevents the leakage of production secrets.
- [SAFE]: The skill references established practices from well-known and trusted technology organizations (e.g., Stripe, AWS, Google, Microsoft) to define its maintenance and security benchmarks.
- [SAFE]: External skill references are limited to other specialized modules by the same author, maintaining a consistent and controlled execution environment.
Audit Metadata