Skills
Navigate
skills/420company/artemis/auth0-spa-js/Gen Agent Trust Hub

auth0-spa-js

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses execa in scripts/utils/auth0-api.mjs and scripts/utils/clients.mjs to execute official Auth0 CLI commands (auth0 apps create, auth0 api ...). These are used for project bootstrapping and are gated by user confirmation in scripts/bootstrap.mjs.
  • [EXTERNAL_DOWNLOADS]: SKILL.md contains an agent instruction to fetch the latest SDK version from the official Auth0 GitHub repository (gh api repos/auth0/auth0-spa-js/releases/latest). This is a trusted source used to ensure the integration uses current software versions.
  • [EXTERNAL_DOWNLOADS]: references/setup.md provides shell scripts that download the Auth0 CLI from official sources (github.com/auth0/auth0-cli) if it is not already installed on the system.
  • [SAFE]: The skill correctly implements security best practices by explicitly warning against storing secrets in browser code, recommending against localStorage for token storage, and utilizing the Authorization Code Flow with PKCE.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 08:33 AM