stash-secrets
Manages encrypted secrets using CipherStash, enabling secure storage and retrieval of sensitive credentials in applications.
Install this skill
or
80/100
Security score
The stash-secrets skill was audited on May 26, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 254
Template literal with variable interpolation in command context
SourceSKILL.md
| 254 | throw new Error(`Failed to load secrets: ${result.failure.message}`) |
low line 45
Access to .env file
SourceSKILL.md
| 45 | workspaceCRN: process.env.CS_WORKSPACE_CRN!, |
low line 46
Access to .env file
SourceSKILL.md
| 46 | clientId: process.env.CS_CLIENT_ID!, |
low line 47
Access to .env file
SourceSKILL.md
| 47 | clientKey: process.env.CS_CLIENT_KEY!, |
low line 48
Access to .env file
SourceSKILL.md
| 48 | accessKey: process.env.CS_CLIENT_ACCESS_KEY!, |
medium line 178
Access to .env file
SourceSKILL.md
| 178 | The CLI reads credentials from the same `CS_*` environment variables. Use a `.env` file for convenience. |
low line 244
Access to .env file
SourceSKILL.md
| 244 | workspaceCRN: process.env.CS_WORKSPACE_CRN!, |
low line 245
Access to .env file
SourceSKILL.md
| 245 | clientId: process.env.CS_CLIENT_ID!, |
low line 246
Access to .env file
SourceSKILL.md
| 246 | clientKey: process.env.CS_CLIENT_KEY!, |
low line 247
Access to .env file
SourceSKILL.md
| 247 | accessKey: process.env.CS_CLIENT_ACCESS_KEY!, |
low line 248
Access to .env file
SourceSKILL.md
| 248 | environment: process.env.NODE_ENV || "development", |
low line 35
External URL reference
SourceSKILL.md
| 35 | Sign up at [cipherstash.com/signup](https://cipherstash.com/signup) to generate credentials. |
Scanned on May 26, 2026
View Security Dashboard