env-inspector
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust redaction strategy for .env files, significantly reducing the risk of accidental secret exposure. The heuristic approach includes keyword blocking, token-pattern recognition, and entropy checks to catch randomized secrets.
- [SAFE]: Includes a path-validation hook (
hooks/path-gate.sh) that acts as a guardrail, ensuring the tool can only be executed against authorized .env files within the designated project root and specifically blocking path traversal attempts. - [SAFE]: No network activity, external package dependencies, or persistence mechanisms were found. The tool operates locally using standard shell utilities.
Audit Metadata