doppler
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands where secrets are injected into the process environment (e.g.,
doppler run -- <command>). This is the core purpose of the tool and is documented using standard CLI patterns. - [SAFE]: The skill promotes several security best practices for secret management, including the use of ephemeral named pipes for mounting secrets to avoid writing plain-text files to disk.
- [SAFE]: Instructions include hardening measures such as setting restrictive file permissions (
chmod 600), using service tokens with limited life spans (--max-age), and preventing secrets from appearing in shell history usingHISTIGNORE. - [SAFE]: The examples provided use generic placeholders and standard test key formats (e.g.,
sk_test_...) rather than exposing actual credentials.
Audit Metadata