clerk-setup
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
WebFetchto retrieve setup instructions fromclerk.comsubdomains (e.g.,https://clerk.com/docs/nextjs/getting-started/quickstart). These are the official documentation resources for the skill's vendor. - [COMMAND_EXECUTION]: The skill guides the agent to install official Clerk packages such as
@clerk/nextjs,@clerk/react, and@clerk/expressusing standard package managers (npm, pnpm, bun) based on the detected framework. - [DATA_EXFILTRATION]: The skill reads
package.jsonto identify project dependencies for framework detection. It does not perform any unauthorized data collection or exfiltration. It specifically provides instructions on how to securely handleCLERK_SECRET_KEYby placing it in environment variables and warns against exposing it in client-side code. - [SAFE]: No malicious patterns, obfuscation, or unauthorized privilege escalation attempts were detected. The skill's behavior is consistent with its stated purpose of configuring authentication.
Audit Metadata