flags-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Package Management: The documentation references numerous npm packages for feature flag adapters and core functionality. These are standard dependencies for the modular SDK architecture and originate from a trusted vendor.- Environment Secret Handling: The skill explains the use of a FLAGS_SECRET environment variable for encryption and discovery. This is a security feature used to protect flag definitions and values during transit.- Manual Configuration Commands: Includes a script snippet for generating a secure random secret using Node.js. This is an administrative setup step provided for the developer to ensure cryptographic integrity during the initialization of the SDK.
Audit Metadata