dotnet-authentication
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Implementation guidance follows industry-standard security practices for .NET applications. Code examples demonstrate proper initialization of
TokenValidationParameterswith all security checks enabled, including issuer, audience, and lifetime validation. - [SAFE]: The skill includes defensive programming patterns for mitigating common vulnerabilities, such as timing attacks on API keys by recommending the use of constant-time comparison via
CryptographicOperations.FixedTimeEquals. - [SAFE]: The instructions explicitly prohibit hardcoding secrets and credentials in source code, directing the user toward secure configuration management and secret stores.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were found. All referenced libraries (e.g.,
Microsoft.AspNetCore.Authentication.JwtBearer,Microsoft.Owin.Security.Jwt) are standard, well-known components from a trusted vendor.
Audit Metadata