vp-env-secrets
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The envctl run command enables the execution of arbitrary shell commands with environment variables loaded from selected dotenv files. While this is the intended purpose, it grants the agent the ability to execute code in the user's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local .env files located in the current working directory and home folder (iter_env_files). While it employs regex validation for keys and escaping for values, it lacks formal boundary markers for the data it ingests. This ingestion surface is combined with high-impact capabilities including arbitrary command execution (envctl run) and file system writes (envctl persist-staged).
- [DYNAMIC_EXECUTION]: The skill supports shell command substitution within environment variables via the dotenvx integration. To mitigate risk, the envctl run command actively scans for substitution patterns like $(...) and requires an explicit --allow-command-substitution flag to proceed.
Audit Metadata