llm-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes multiple code snippets that demonstrate insecure coding practices to provide educational contrast. These snippets contain hardcoded strings representing example database credentials and API keys. Examples include 'postgresql://admin:SuperSecret123@db.internal.acme.com/prod' in
rules/system-prompt-leakage.mdand 'sk-abc123secretkey456' inrules/sensitive-disclosure.mdandAGENTS.md. These are considered safe in context because they are explicitly part of 'Vulnerable' code blocks intended for learning and use obviously generic or placeholder values.
Audit Metadata