auth0-migration
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established security best practices for identity management and migration. Specifically:
- Environment Variables: All code snippets and CLI commands use environment variable placeholders (e.g.,
AUTH0_SECRET,YOUR_MGMT_API_TOKEN) rather than hardcoded credentials. - Secure Algorithms: It explicitly guides users to transition from symmetric (HS256) to more secure asymmetric (RS256) signing algorithms for API authentication.
- Official Tooling: All recommended libraries and CLI tools are standard, well-known packages from the official Auth0 vendor.
- Data Handling: Instructions for user data export and import (including password hashes) use official APIs and standard encryption-preserving formats.
- Network Operations: Network requests, such as fetching JSON Web Key Sets (JWKS) or uploading user batches, are directed exclusively to the service's official infrastructure.
Audit Metadata