api-auth-nextauth
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation and examples guide the user to configure Auth.js using the
AUTH_SECRETenvironment variable and provider-specific credentials (e.g.,AUTH_GITHUB_ID) without including any hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js packages within the Auth.js ecosystem (e.g.,
next-auth,@auth/prisma-adapter,bcryptjs) and follows official configuration patterns. - [PROMPT_INJECTION]: Instructional blocks use emphasized language (e.g., "CRITICAL", "MUST") exclusively to ensure correct implementation of the authentication framework and do not attempt to override the underlying AI agent's safety protocols.
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for processing external data (user credentials) but mitigates risk by promoting strict input validation via Zod and secure password storage practices.
- [DYNAMIC_CONTEXT_INJECTION]: No use of dynamic command execution snippets (e.g. backtick patterns) was detected in the skill instructions.
Audit Metadata