clerk-hello-world

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and implementation examples for Clerk authentication. It correctly distinguishes between client-side and server-side authentication methods (e.g., using auth() vs currentUser()).
  • [DATA_EXPOSURE]: The skill mentions sensitive environment variables such as CLERK_SECRET_KEY and NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, but it does not attempt to access them or exfiltrate them. It provides standard configuration advice for developers.
  • [COMMAND_EXECUTION]: The allowed-tools section includes Bash(npm:*), which is a standard requirement for managing JavaScript dependencies in an AI agent environment. No malicious shell commands or remote script executions were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 03:14 AM
Security Audit — agent-trust-hub — clerk-hello-world