envdump
Fail
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
scripts/envdump.shscript executes theenvcommand to collect all environment variables and stores them in a plain-text file. This is a high-risk operation because environment variables are the standard mechanism for providing secrets to applications, includingAPI_KEY,AWS_SECRET_ACCESS_KEY, andDATABASE_URLvalues.\n- [DATA_EXFILTRATION]: Writing the entire environment state and system information toout/env.txtfacilitates the leakage of sensitive data. This information provides a roadmap of the execution environment and exposes private credentials to any entity with access to the file system or output artifacts.
Recommendations
- AI detected serious security threats
Audit Metadata