zuplo
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- CREDENTIALS_UNSAFE (SAFE): The file
gitops.mdcontains a dummy API key (sk-live-123abc...) specifically within a 'Bad Example' section to demonstrate why hardcoding secrets is dangerous. This is educational content and not a functional credential leak. - EXTERNAL_DOWNLOADS (SAFE): The skill references the official
@zuplo/runtimepackage and thezuplo/zuplo-deploy-actionGitHub Action. These are standard dependencies for the platform and are used appropriately in configuration examples. - COMMAND_EXECUTION (SAFE): Example code snippets include standard
curlcommands and CI/CD yaml definitions (GitHub Actions). These are provided as static documentation for deployment workflows and do not trigger unauthorized execution by the agent. - DATA_EXFILTRATION (SAFE): No patterns of data exfiltration were found. The skill emphasizes secure handling of environment variables and the use of encrypted secrets.
- PROMPT_INJECTION (SAFE): No instructions targeting agent behavior override or safety bypass were detected. The markdown content follows a standard instructional format.
Audit Metadata