auth-ops
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed technical reference material for authentication and authorization. It includes decision trees and implementation guides for session management, JSON Web Tokens (JWT), and access control models such as RBAC, ABAC, and ReBAC.
- [SAFE]: Code snippets provided for Node.js, Python, and Go demonstrate industry-standard security practices, including the use of memory-hard hashing algorithms like Argon2id, secure cookie configuration (HttpOnly, Secure, SameSite), and constant-time comparisons for secrets.
- [SAFE]: The skill includes guidance on advanced security features such as WebAuthn/Passkeys, Multi-Factor Authentication (MFA), and Identity-Aware Proxies (IAP), emphasizing fail-closed layering and defense-in-depth strategies.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. All external references and libraries mentioned (e.g., Better Auth, Cloudflare Access, Auth0) are well-known, legitimate services and official documentation sources.
Audit Metadata