auth0-laravel-api
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Auth0 CLI installation script from the authorized Auth0 GitHub repository (
raw.githubusercontent.com/auth0/auth0-cli). This is a legitimate operation from a recognized vendor. - [COMMAND_EXECUTION]: Utilizes standard shell commands for package management via Composer and resource management through the Auth0 CLI. It also includes local connectivity tests using
curlto verify that the protected endpoints correctly return 401 Unauthorized status codes without a token. - [DATA_EXPOSURE]: Includes a workflow to append configuration values to the project's
.envfile. This is standard practice for secret management, and the skill specifically cautions the agent against reading the existing contents of the environment file to prevent accidental exposure of other secrets. - [SAFE]: Demonstrates high security awareness by defining a "TOKEN ISOLATION" policy, which instructs the agent never to display, store, or ask the user to paste access tokens, using shell-level capture and length reporting instead.
Audit Metadata