deployment-validation-config-validate

Warn

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXFILTRATION]: The Python ConfigurationAnalyzer class recursively searches for and reads configuration files using Path.glob and Path.read_text(). This includes patterns for sensitive files like .env, allowing the agent to access and process potentially sensitive data from the local environment.
  • [CREDENTIALS_UNSAFE]: The skill implements automated secret detection logic using regular expressions designed to find API keys, passwords, authentication tokens, and AWS credentials within configuration files. This capability can be misused to extract and expose credentials stored on the user's machine.
  • [COMMAND_EXECUTION]: The skill uses filesystem interaction tools such as pathlib for scanning directory structures and chokidar in the TypeScript implementation for monitoring file changes. These allow the agent to monitor and read files throughout the provided project path without explicit user confirmation for each file read.
  • [EXTERNAL_DOWNLOADS]: The provided code snippets rely on several external dependencies including PyYAML and semver for Python, as well as ajv, ajv-formats, chokidar, and jest for Node.js, which would be fetched from public registries during environment setup.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 14, 2026, 02:56 AM