env-inspector

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust redaction strategy for .env files, significantly reducing the risk of accidental secret exposure. The heuristic approach includes keyword blocking, token-pattern recognition, and entropy checks to catch randomized secrets.
  • [SAFE]: Includes a path-validation hook (hooks/path-gate.sh) that acts as a guardrail, ensuring the tool can only be executed against authorized .env files within the designated project root and specifically blocking path traversal attempts.
  • [SAFE]: No network activity, external package dependencies, or persistence mechanisms were found. The tool operates locally using standard shell utilities.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 10:55 PM