auth0-laravel-api

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the official Auth0 CLI installation script from the authorized Auth0 GitHub repository (raw.githubusercontent.com/auth0/auth0-cli). This is a legitimate operation from a recognized vendor.
  • [COMMAND_EXECUTION]: Utilizes standard shell commands for package management via Composer and resource management through the Auth0 CLI. It also includes local connectivity tests using curl to verify that the protected endpoints correctly return 401 Unauthorized status codes without a token.
  • [DATA_EXPOSURE]: Includes a workflow to append configuration values to the project's .env file. This is standard practice for secret management, and the skill specifically cautions the agent against reading the existing contents of the environment file to prevent accidental exposure of other secrets.
  • [SAFE]: Demonstrates high security awareness by defining a "TOKEN ISOLATION" policy, which instructs the agent never to display, store, or ask the user to paste access tokens, using shell-level capture and length reporting instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 08:57 PM
Security Audit — agent-trust-hub — auth0-laravel-api