auth0-swift
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious prompt injection patterns or attempts to override agent safety guidelines were detected. Instructions provided are purely functional and focused on SDK integration.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration patterns were identified. The skill manages standard Auth0 configuration (ClientId and Domain) which are non-sensitive public identifiers for OAuth2 flows. Sensitive tokens are correctly handled via the SDK's CredentialsManager which utilizes the secure system Keychain.
- [REMOTE_CODE_EXECUTION]: External resources, including the Auth0.swift SDK and Auth0 CLI, are fetched from official and trusted repositories. The bootstrap process uses local scripts and standard developer tools without executing untrusted remote code.
- [COMMAND_EXECUTION]: The skill executes shell commands for project automation (e.g., swift package, xcodebuild, auth0 CLI). These operations are performed using the execa library with parameters passed as arrays or through safe template literals, which minimizes risks of command injection from external project metadata.
- [SAFE]: The skill is authored by the official vendor and its operations are consistent with the documented purpose of assisting developers in integrating authentication services.
Audit Metadata