cerbos-embedded-pdp
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes WebAssembly (WASM) to execute authorization logic locally. It provides instructions for loading and instantiating the
@cerbos/embedded-server/server.wasmmodule using standard APIs likeWebAssembly.instantiateStreaming. - [COMMAND_EXECUTION]: A build-time script is provided to copy the WASM binary from the installed package to the application's public directory. This is a common pattern for managing static assets in modern web frameworks.
- [EXTERNAL_DOWNLOADS]: The client is configured to fetch policy bundles from Cerbos Hub and may fetch the WASM module from external URLs. These operations target official vendor infrastructure or user-defined trusted endpoints.
- [CREDENTIALS_UNSAFE]: Guidance is provided for managing Cerbos Hub credentials. The skill promotes best practices by recommending environment variables for server-side environments and providing patterns to avoid exposing secrets in browser-side code.
Audit Metadata