spacetimedb-auth

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code snippets for integrating third-party authentication providers. It correctly uses placeholders for sensitive configuration values, such as <YOUR_AUTH0_DOMAIN>, <YOUR_AUTH0_CLIENT_ID>, and <YOUR_CLERK_PUBLISHABLE_KEY>.
  • [SAFE]: All external software dependencies, such as @auth0/auth0-react, @clerk/clerk-react, and react-oidc-context, are standard libraries from well-known technology services and are installed via official package registries (NPM).
  • [SAFE]: The instruction set emphasizes critical security best practices, including the server-side validation of JWT iss (issuer) and aud (audience) claims to prevent token repurposing attacks.
  • [SAFE]: The skill refers to official documentation and tools from established domains like spacetimedb.com, auth0.com, clerk.com, oidcdebugger.com, and jwt.io for educational and testing purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 08:28 PM
Security Audit — agent-trust-hub — spacetimedb-auth