secure-deployment

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): The skill's primary purpose is to enforce and document security best practices for AI deployment. It covers areas like container isolation, secrets management, and dependency auditing.
  • [DATA_EXPOSURE] (SAFE): No hardcoded credentials, sensitive file access, or unauthorized network exfiltration patterns were detected. The skill actually provides templates for using HashiCorp Vault to avoid hardcoding secrets.
  • [REMOTE_CODE_EXECUTION] (SAFE): The provided Python script (scripts/security-checklist.py) uses only standard Python libraries (json, typing, dataclasses, enum) and performs local logic without executing arbitrary commands or downloading remote code.
  • [PRIVILEGE_ESCALATION] (SAFE): The skill explicitly promotes the principle of least privilege, recommending non-root users, read-only filesystems, and dropping Linux capabilities in container configurations.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:34 PM