auth0-php-api
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup guide includes instructions to download the Auth0 CLI from the vendor's official GitHub repository. This is a standard procedure for installing official tooling and originates from a well-known service.
- [COMMAND_EXECUTION]: The skill describes the use of PHP's built-in server and the Auth0 CLI for testing and resource management. It provides a 'TOKEN ISOLATION' protocol to ensure the agent handles access tokens securely by capturing them in shell variables without printing or displaying the raw values in the conversation context.
- [CREDENTIALS_UNSAFE]: The documentation correctly identifies hardcoding credentials as a common mistake and instead instructs users to store sensitive information like the Auth0 Domain and Audience in environment variables (.env files), following industry standard secret management practices.
Audit Metadata