auth0-aspnetcore-authentication

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it facilitates the reading and processing of local configuration files such as appsettings.json. 1. Ingestion points: The automated setup logic in references/setup.md reads appsettings.json and appsettings.Development.json. 2. Boundary markers: Absent. The skill does not define specific delimiters for separating configuration data from instructions. 3. Capability inventory: The agent has access to shell execution via dotnet, auth0-cli, and curl as described in SKILL.md and references/setup.md. 4. Sanitization: Absent. There is no mention of validating or escaping the contents of the configuration files before they are processed by the agent.
  • [REMOTE_CODE_EXECUTION]: The setup script executes a remote installation script directly in the shell. Evidence: curl -sSfL https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh | sh in references/setup.md. Context: This command installs the official Auth0 CLI from the vendor's trusted GitHub repository.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Auth0 CLI installer from an external source. Evidence: https://raw.githubusercontent.com/auth0/auth0-cli/main/install.sh referenced in references/setup.md.
  • [COMMAND_EXECUTION]: The skill performs various shell operations to configure the development environment and Auth0 settings. Evidence: The use of dotnet add package, dotnet user-secrets set, and auth0 apps create commands throughout the instructions and setup scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 08:56 AM
Security Audit — agent-trust-hub — auth0-aspnetcore-authentication