skills/descope/skills/descope-auth/Gen Agent Trust Hub

descope-auth

Pass

Audited by Gen Agent Trust Hub on Nov 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official Descope SDKs and components for multiple frameworks (React, Next.js, Angular, Kotlin, and Swift). These dependencies are sourced from established package registries such as NPM, PyPI, and Maven Central, as well as the vendor's official GitHub repository.
  • Evidence: npm install commands in multiple files, pip install descope in references/backend.md, and GitHub repository link https://github.com/descope/descope-swift in references/swift.md.
  • [EXTERNAL_DOWNLOADS]: Provides HTML script tags to load specialized web components and JS SDKs from the vendor's content delivery network for vanilla JavaScript applications.
  • Evidence: https://descopecdn.com/npm/@descope/web-component@4.3.3/dist/index.js in references/vanilla-js.md.
  • [SAFE]: The documentation includes explicit security guardrails advising users against dangerous patterns such as manual JWT parsing, client-side storage of sensitive tokens, and the exposure of management keys in frontend code.
  • Evidence: 'DO NOT (Security Guardrails)' section in SKILL.md and framework-specific 'DO NOT' warnings in reference files.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 12, 2026, 09:50 PM