clerk-hello-world
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and implementation examples for Clerk authentication. It correctly distinguishes between client-side and server-side authentication methods (e.g., using
auth()vscurrentUser()). - [DATA_EXPOSURE]: The skill mentions sensitive environment variables such as
CLERK_SECRET_KEYandNEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, but it does not attempt to access them or exfiltrate them. It provides standard configuration advice for developers. - [COMMAND_EXECUTION]: The
allowed-toolssection includesBash(npm:*), which is a standard requirement for managing JavaScript dependencies in an AI agent environment. No malicious shell commands or remote script executions were detected.
Audit Metadata