descope-auth
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Descope SDKs and components for multiple frameworks (React, Next.js, Angular, Kotlin, and Swift). These dependencies are sourced from established package registries such as NPM, PyPI, and Maven Central, as well as the vendor's official GitHub repository.
- Evidence:
npm installcommands in multiple files,pip install descopeinreferences/backend.md, and GitHub repository linkhttps://github.com/descope/descope-swiftinreferences/swift.md. - [EXTERNAL_DOWNLOADS]: Provides HTML script tags to load specialized web components and JS SDKs from the vendor's content delivery network for vanilla JavaScript applications.
- Evidence:
https://descopecdn.com/npm/@descope/web-component@4.3.3/dist/index.jsinreferences/vanilla-js.md. - [SAFE]: The documentation includes explicit security guardrails advising users against dangerous patterns such as manual JWT parsing, client-side storage of sensitive tokens, and the exposure of management keys in frontend code.
- Evidence: 'DO NOT (Security Guardrails)' section in
SKILL.mdand framework-specific 'DO NOT' warnings in reference files.
Audit Metadata