infra-config-setup-env
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates best practices for infrastructure configuration. It mandates the use of Zod for schema validation at application startup, which is a key security measure to prevent configuration-related runtime errors and ensure type safety.
- [CREDENTIALS_UNSAFE]: The skill explicitly addresses credential security by providing detailed instructions and .gitignore templates to ensure that sensitive files like .env.local are not committed to version control. It also provides a decision framework for identifying secrets and handling them via secure CI/CD mechanisms.
- [SAFE]: The skill prevents accidental data exposure by enforcing framework-specific prefixes (NEXT_PUBLIC_, VITE_) to distinguish between variables that can safely be exposed to the client-side bundle and those that must remain server-side.
Audit Metadata