skills/jeremylongshore/claude-code-plugins-plus-skills/langchain-multi-env-setup/Gen Agent Trust Hub
langchain-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION] (SAFE): The skill implements a configuration loader that accesses environment variables and Google Cloud Secret Manager. This adheres to security best practices for externalizing configuration and secrets. No hardcoded credentials or unauthorized data exfiltration patterns were detected.- [COMMAND_EXECUTION] (SAFE): Documentation includes example shell commands for running applications and deploying to Google Cloud, but no scripts within the skill perform arbitrary command execution or subprocess spawning with untrusted input.- [REMOTE_CODE_EXECUTION] (SAFE): No remote script execution patterns (such as piped curl commands) or dynamic loading of untrusted external code were identified.- [SAFE] (SAFE): The implementation uses
yaml.safe_load()for parsing configuration files, which is a critical security measure to prevent YAML deserialization vulnerabilities.
Audit Metadata