geminiignore-finops
Optimizes .geminiignore files to enhance AI context efficiency and reduce token costs, improving FinOps for AI projects.
Install this skill
or
87/100
Security score
The geminiignore-finops skill was audited on Jun 7, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 49
Access to .env file
SourceSKILL.md
| 49 | Verify that the AI can still see critical configuration blueprints (like `.env.example`, `package.json`, `composer.json`, `pyproject.toml`) but ignores the actual `.env` files and compilation artifact |
low line 87
Access to .env file
SourceSKILL.md
| 87 | .env |
low line 88
Access to .env file
SourceSKILL.md
| 88 | .env.* |
low line 89
Access to .env file
SourceSKILL.md
| 89 | !.env.example |
medium line 162
Access to .env file
SourceSKILL.md
| 162 | - ✅ **Whitelist config examples**: Use rules like `!.env.example` alongside `.env` ignores so the AI understands configuration structure without exposing credentials. |
Scanned on Jun 7, 2026
View Security Dashboard