kuroco-auth-design
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-based design guide that instructs the AI agent on how to consult users on Kuroco's membership and authentication features. It does not perform any automated actions or network operations.
- [PRIVILEGE_ESCALATION]: The instructions explicitly warn against misconfiguring member and group permissions that could lead to unintended privilege escalation (e.g., non-admin users being able to modify their own group memberships). This is provided as a security advisory to the user.
- [CREDENTIALS_SAFE]: The content notes the sensitivity of privileged static tokens and emphasizes that they should be handled with care, but does not include any actual hardcoded credentials, secrets, or scripts to exfiltrate them.
- [COMMAND_EXECUTION]: No shell commands or executable code are present in the skill files. The skill serves as a knowledge base for design decisions.
- [EXTERNAL_DOWNLOADS]: There are no external URLs for downloads or script executions identified. All references are to internal documentation or other agent skills.
Audit Metadata