manage-env
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive configuration files (.env) and AWS credentials. It mitigates exposure risks by forbidding the output of secret values to the terminal, logs, or diffs, and by using the file:// syntax to avoid secrets appearing in shell history.
- [SAFE]: Uses standard tools like aws, git, and awk to manage environment configurations. All commands are transparently described to the user before execution, and dangerous shell practices like eval are explicitly prohibited.
- [SAFE]: Ingests data from local files and AWS parameters. The skill mitigates potential indirect prompt injection by treating data as raw strings and strictly enforcing boundaries that prevent the agent from interpreting secret content as instructions.
Audit Metadata