{"slug":"trailofbits-insecure-defaults","source_name":"trailofbits/insecure-defaults","name":"Trailofbits/Insecure Defaults","description":"Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.","version":1,"lift":{"pass_rate_delta_pts":-33.33,"pass_rate_pct":78.3,"total_cases":23,"passed_cases":18,"tokens_delta_pct":39.2,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-07T15:42:51.096472+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":-33.33,"with_pass_pct":33.3,"without_pass_pct":66.7,"tokens_delta_pct":39.2,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-07T15:42:51.096472+00:00","run_id":"d1d821a0-f6ba-4149-a769-2537cffceacf","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"CC-BY-SA-4.0","install_count":0,"manifest_hash":"e66bd58b4b593d9009cc4b9bf18a7dbe7ea503e69099288fe010f804d9af6a73","raw_url":"https://app.decimal.ai/s/trailofbits-insecure-defaults/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/trailofbits-insecure-defaults"}