stash-auth
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a canonical documentation reference for authentication strategies. It includes critical security warnings regarding client lifetimes, correctly identifying the cross-tenant data hazards associated with sharing user-scoped clients.- [SAFE]: The skill identifies sensitive configuration paths (e.g.,
~/.cipherstash/auth.json,~/.cipherstash/secretkey.json) and correctly instructs agents and application code to avoid direct access to these files, advocating for the use of official SDK strategies and thestashCLI instead.- [SAFE]: It provides clear guidance on managing sensitive environment variables (CS_CLIENT_KEY,CS_CLIENT_ACCESS_KEY) and advises on secure deployment practices usingstash envto pipe secrets directly into stores.
Audit Metadata