d6e-auth-integration
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents a legitimate authentication flow using standard security best practices such as HttpOnly cookies, CSRF state verification, and secure redirection logic. All external resources (d6e.ai, b-button.d6e.ai) are consistent with the vendor's own infrastructure.
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive secrets were found. All sensitive configuration values such as client IDs and secrets use descriptive placeholders for the developer to provide during implementation.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. The skill's code snippets are templates for local implementation within a SvelteKit application context.
- [PROMPT_INJECTION]: The instructions do not contain any attempt to override agent constraints, bypass safety filters, or extract system prompts.
- [COMMAND_EXECUTION]: No dangerous shell commands or dynamic context injection patterns using the '!' syntax were detected in the skill file.
Audit Metadata