NYC

environment-setup

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE] (SAFE): The skill contains example environment variables (e.g., AWS_ACCESS_KEY_ID, STRIPE_SECRET_KEY, DATABASE_URL). All sensitive values are clearly marked as placeholders (e.g., 'sk_test_xxx', 'AKIAXXXXXXXX', 'change-me-in-production') and do not represent actual exposed credentials.
  • [DATA_EXFILTRATION] (SAFE): No malicious network operations or exfiltration patterns were detected. The skill focuses on local file management and configuration.
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard, reputable packages (dotenv, zod) from the npm registry. No unverified or high-risk external scripts are downloaded.
  • [PROMPT_INJECTION] (SAFE): No prompt injection or behavior override patterns were detected in the instructions.
  • [REMOTE_CODE_EXECUTION] (SAFE): No remote code execution patterns or unsafe dynamic execution (e.g., eval(), exec() on external input) are present.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:23 PM