skills/clerk/skills/clerk-setup/Gen Agent Trust Hub

clerk-setup

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses WebFetch to retrieve setup instructions from clerk.com subdomains (e.g., https://clerk.com/docs/nextjs/getting-started/quickstart). These are the official documentation resources for the skill's vendor.
  • [COMMAND_EXECUTION]: The skill guides the agent to install official Clerk packages such as @clerk/nextjs, @clerk/react, and @clerk/express using standard package managers (npm, pnpm, bun) based on the detected framework.
  • [DATA_EXFILTRATION]: The skill reads package.json to identify project dependencies for framework detection. It does not perform any unauthorized data collection or exfiltration. It specifically provides instructions on how to securely handle CLERK_SECRET_KEY by placing it in environment variables and warns against exposing it in client-side code.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized privilege escalation attempts were detected. The skill's behavior is consistent with its stated purpose of configuring authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 02:53 PM
Security Audit — agent-trust-hub — clerk-setup