catalyst-authentication
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code patterns for using Zoho Catalyst's authentication services. It includes instructions for user management, environment-specific configuration (ZAID), and OAuth connection management.
- [SAFE]: Code snippets use standard Catalyst SDK methods for authentication flows (e.g., getCurrentUser, registerUser, signIn, signOut).
- [SAFE]: The skill correctly advises using environment variables for sensitive configuration like ZAID and explains the security implications of environment promotion.
- [SAFE]: Guidance on using the 'credentials: include' flag for fetch calls ensures that authentication tokens are properly forwarded to backend services in a secure manner.
- [SAFE]: Instructions for managing 'Connections' describe how to handle OAuth tokens through the official Catalyst Console, leveraging built-in security features for token refresh and scope management.
Audit Metadata