cloud-manage-project
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong credential management by storing sensitive data in a local
.elastic-credentialsfile with restricted owner-only permissions (mode 0600) and utilizing.envfiles for configuration.\n- [SAFE]: The Python script provides protection against command injection when loading credentials via shellevalby usingshlex.quotefor values and validating environment variable names against a strict regex pattern (^[A-Za-z_][A-Za-z0-9_]*$).\n- [SAFE]: The instructions include a "Critical principles" section that explicitly forbids the agent from revealing API keys, passwords, or the contents of the credential file in the chat interface or thinking traces.\n- [SAFE]: Network operations are directed solely to the official vendor API atapi.elastic-cloud.com, and the skill incorporates confirmation steps for destructive actions like deleting projects or resetting credentials.
Audit Metadata