secret-handling
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill codifies comprehensive security protocols that prohibit agents from reading sensitive files such as
.envand.env.production, providing safer alternatives for configuration discovery. - [COMMAND_EXECUTION]: Includes PowerShell and Git logic (e.g.,
git diff --cached,git reset HEAD) intended for defensive implementation of a pre-commit hook that audits staged content for sensitive patterns. - [DATA_EXPOSURE]: Defines a robust set of regular expressions for detecting diverse credential types—including API keys, JWT tokens, and private keys—ensuring they are identified and blocked before potential exposure in repository history.
Audit Metadata