wizard
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a framework for generating bash wizards to assist humans with manual configuration steps (e.g., provisioning infrastructure or setting up API keys).
- [SAFE]: The provided
template.shincludes security-conscious helpers for secret management: ask_secret: Usesread -rsto hide sensitive input from the terminal.write_env: Creates.envfiles withumask 077(mode 0600) to ensure secrets are not world-readable.set_secret: Securely transmits credentials to GitHub Actions using the officialghCLI tool via stdin.- [SAFE]: The instructions explicitly direct the AI to use
ask_secretfor sensitive values and discourage running the generated scripts automatically, maintaining a human-in-the-loop requirement for browser interactions and credential handling.
Audit Metadata