Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

Configure Pydantic Basesettings With Env File

skill · ECNU-ICALK/AutoSkillLicence not declaredAudited 14 Oct 2026 · source 04e912cff54b

★ 602pushed 157 days agoversion 0.1.0
✕BLOCKGrade D · 69/100 · 4 findings · 04e912c
602repo stars · whole ECNU-ICALK/AutoSkill

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 04e912cff54b and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 4 findings, 4 critical or high. What it does: Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Configure Pydantic Basesettings With Env File (ECNU-ICALK/AutoSkill)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/ecnu-icalk/configure-pydantic-basesettings-with-env-file

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 4 critical or high findings, starting with “Prompt injection” in SKILL.md:4. Do not install it without reading them.

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score69/100✕BLOCK D
0 critical4 high0 medium0 low0 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 721 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL4
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (4)

HIGHPrompt injectionprompt.credential_read · SKILL.md:4
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
description: "Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution."
Why
asks the agent to read credentials
Fix
—
HIGHPrompt injectionprompt.credential_read · SKILL.md:22
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution.
Why
asks the agent to read credentials
Fix
—
HIGHPrompt injectionprompt.credential_read · SKILL.md:27
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Configure a Pydantic `BaseSettings` class to load environment variables from a `.env` file located at a specific path relative to the settings file.
Why
asks the agent to read credentials
Fix
—
HIGHPrompt injectionprompt.credential_read · <listing:description>:1
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution.
Why
asks the agent to read credentials
Fix
—

Audit 0.4.1 · source sha 04e912cff54b · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

What it tells the agent

Full source on GitHub ↗

Its description: Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution.

---
id: "d7bd81e9-2095-4fc4-9085-1dd272736b2a"
name: "Configure Pydantic BaseSettings with .env file"
description: "Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution."
version: "0.1.0"
tags:
  - "pydantic"
  - "python"
  - "configuration"
  - "env-file"
  - "base-settings"
triggers:
  - "configure pydantic settings"
  - "pydantic env file not found"
  - "base settings env_file"
  - "pydantic validation error missing fields"
  - "where to store .env file"
---

# Configure Pydantic BaseSettings with .env file

Configure a Pydantic BaseSettings class to load environment variables from a .env file, ensuring correct relative or absolute path resolution.

## Prompt

# Role & Objective
Configure a Pydantic `BaseSettings` class to load environment variables from a `.env` file located at a specific path relative to the settings file.

# Operational Rules & Constraints
1. Define a class `Settings` inheriting from `pydantic.BaseSettings`.
2. Include fields for database configuration: `db_url` (PostgresDsn), `db_host` (str), `db_port` (int), `db_user` (str), `db_name` (str), `db_pass` (str).
3. Include fields for app configuration: `port` (int), `host` (str).
4. Configure the inner `Config` class with `env_file` set to the correct relative path (e.g., `.env` for same directory, `../.env` for parent directory).
5. Set `env_file_encoding` to "utf-8".

# Anti-Patterns
- Do not change the field names or types provided in the user's schema.
- Do not assume the `.env` file is in the system root.

## Triggers

- configure pydantic settings
- pydantic env file not found
- base settings env_file
- pydantic validation error missing fields
- where to store .env file

Excerpt, first 1,763 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 04e912c

git clone https://github.com/ECNU-ICALK/AutoSkill
git -C AutoSkill checkout 04e912cff54b

The author documents no install command, so this uses the repository directly. Our verdict covers commit 04e912cff54b only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source 04e912cff54b

Similar skills

Questions about Configure Pydantic Basesettings With Env File

What does the Configure Pydantic Basesettings With Env File skill do?
AutoSkill: Experience-Driven Lifelong Learning via Skill Self-Evolution
Is Configure Pydantic Basesettings With Env File safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can Configure Pydantic Basesettings With Env File access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (04e912cff54b), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.