test
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages sensitive credentials, including OpenRouter API keys and OIDC authentication details.
- Evidence: It reads and writes these keys to
~/.vibes/.envandtest-vibes/.envusing theBashtool. - Evidence: API keys are passed as command-line arguments to the deployment scripts (e.g.,
--ai-key <key>). - [COMMAND_EXECUTION]: The skill performs several shell operations to assemble, deploy, and verify the application.
- Evidence: Uses
bunto execute local scripts within the project directory, such asassemble.jsanddeploy-cloudflare.js. - Evidence: Utilizes
sedandechoto programmatically update configuration files in the user's local environment. - Evidence: Employs
curlto verify the status of deployed services on Cloudflare Workers.
Audit Metadata