guarding-deployments
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill executes standard development commands (
npm run lint,npm test) and a local shell script for environment validation. These operations are restricted to the local project context.\n- [DATA_EXPOSURE] (SAFE): Thecheck-env.shscript accesses.env.productionto verify that specific keys (DB_URL, API_KEY) are defined. While this involves reading sensitive files, the script only checks for the existence of keys and does not output their values or perform any network operations to exfiltrate the data.\n- [EXTERNAL_DOWNLOADS] (SAFE): No remote scripts or external packages are downloaded during the execution of this skill.
Audit Metadata