user-authentication-system
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/setup_auth.pyusessubprocess.runto execute package manager commands (npm installandpip3 install). This execution is strictly controlled and limited to installing a predefined list of reputable authentication dependencies based on the user's selected provider and framework. - [EXTERNAL_DOWNLOADS]: The skill automates the installation of authentication SDKs from official registries (NPM and PyPI). All packages identified, such as
@clerk/nextjs,@auth0/nextjs-auth0, andsupabase-js, are legitimate tools from well-known service providers. - [SAFE]: The skill follows security best practices by instructing the agent to store credentials in environment files (
.envor.env.local) rather than hardcoding them into application logic. No malicious patterns such as data exfiltration, prompt injection, or obfuscation were detected.
Audit Metadata