deployment-validation-config-validate
Warn
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The Python
ConfigurationAnalyzerclass recursively searches for and reads configuration files usingPath.globandPath.read_text(). This includes patterns for sensitive files like.env, allowing the agent to access and process potentially sensitive data from the local environment. - [CREDENTIALS_UNSAFE]: The skill implements automated secret detection logic using regular expressions designed to find API keys, passwords, authentication tokens, and AWS credentials within configuration files. This capability can be misused to extract and expose credentials stored on the user's machine.
- [COMMAND_EXECUTION]: The skill uses filesystem interaction tools such as
pathlibfor scanning directory structures andchokidarin the TypeScript implementation for monitoring file changes. These allow the agent to monitor and read files throughout the provided project path without explicit user confirmation for each file read. - [EXTERNAL_DOWNLOADS]: The provided code snippets rely on several external dependencies including
PyYAMLandsemverfor Python, as well asajv,ajv-formats,chokidar, andjestfor Node.js, which would be fetched from public registries during environment setup.
Audit Metadata