click
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [Secure Resource Handling]: The skill suggests using environment variables (envvar=) for sensitive inputs, which is a recognized security best practice to prevent the leakage of credentials in command logs or code.
- [Robust Input Validation]: By recommending Click's built-in type system, such as click.Path(exists=True), the skill helps developers implement safer handling of user-supplied arguments and options.
- [Proper Encoding Practices]: The recommendation to use click.echo() instead of print() ensures that output is handled consistently across different terminal environments and encodings, improving overall reliability.
Audit Metadata