springboot-auth-magic-link
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard magic link authentication flow using secure Spring Boot components (Entity, Repository, Service, and Controller).
- [SAFE]: Token generation utilizes
java.security.SecureRandomwith 48 bytes of entropy, which meets high security standards for authentication tokens. - [SAFE]: External dependencies are restricted to the official
spring-boot-starter-mailpackage and Tailwind CSS via a well-known CDN. - [SAFE]: The generated code includes appropriate security measures, such as token expiration checks (default 15 minutes), single-use token logic, and automated database cleanup tasks.
- [SAFE]: Sensitive configuration for production (SMTP credentials) is managed via environment variables within
application-prod.yml, adhering to secret management best practices.
Audit Metadata