guarding-deployments

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill executes standard development commands (npm run lint, npm test) and a local shell script for environment validation. These operations are restricted to the local project context.\n- [DATA_EXPOSURE] (SAFE): The check-env.sh script accesses .env.production to verify that specific keys (DB_URL, API_KEY) are defined. While this involves reading sensitive files, the script only checks for the existence of keys and does not output their values or perform any network operations to exfiltrate the data.\n- [EXTERNAL_DOWNLOADS] (SAFE): No remote scripts or external packages are downloaded during the execution of this skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:33 PM