infra-config-setup-env
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a set of documentation and examples focused on secure environment configuration. It provides clear warnings against committing secrets and guides the user on using validation libraries like Zod to ensure configuration integrity.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing environment configuration files (.env), creating a surface for indirect prompt injection from external data. The skill mitigates this risk by mandating the use of Zod for runtime schema validation and type-safe parsing at the application entry point. Ingestion points: .env and .env.example files. Boundary markers: Mandated use of Zod schemas. Capability inventory: Configuration management. Sanitization: Strict type enforcement via Zod.
- [EXTERNAL_DOWNLOADS]: The skill metadata references a JSON schema from the vendor's GitHub repository. This is a standard and expected reference for metadata validation and does not pose a security risk.
Audit Metadata