biometric-auth
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable code or scripts, serving only as a documentation resource for developers. The instructions focus on secure coding practices rather than providing ready-to-run automation.
- [SAFE]: The technical guidance provided aligns with industry best practices, specifically advocating for cryptographic gating of biometric prompts (binding authentication to a key operation) to prevent binary patching bypasses.
- [SAFE]: The code snippets for Android and iOS utilize strong security primitives such as Android KeyStore, iOS Secure Enclave, and the BiometricPrompt API, ensuring high-security standards (Class 3 biometrics).
Audit Metadata