auth0-aspnetcore-authentication
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it facilitates the reading and processing of local configuration files such as appsettings.json. 1. Ingestion points: The automated setup logic in
references/setup.mdreadsappsettings.jsonandappsettings.Development.json. 2. Boundary markers: Absent. The skill does not define specific delimiters for separating configuration data from instructions. 3. Capability inventory: The agent has access to shell execution viadotnet,auth0-cli, andcurlas described inSKILL.mdandreferences/setup.md. 4. Sanitization: Absent. There is no mention of validating or escaping the contents of the configuration files before they are processed by the agent. - [REMOTE_CODE_EXECUTION]: The setup script executes a remote installation script directly in the shell. Evidence:
curl -sSfL https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh | shinreferences/setup.md. Context: This command installs the official Auth0 CLI from the vendor's trusted GitHub repository. - [EXTERNAL_DOWNLOADS]: The skill downloads the Auth0 CLI installer from an external source. Evidence:
https://raw.githubusercontent.com/auth0/auth0-cli/main/install.shreferenced inreferences/setup.md. - [COMMAND_EXECUTION]: The skill performs various shell operations to configure the development environment and Auth0 settings. Evidence: The use of
dotnet add package,dotnet user-secrets set, andauth0 apps createcommands throughout the instructions and setup scripts.
Audit Metadata