auth
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill describes a standard authentication framework using established libraries and protocols like OAuth 2.0 and PKCE, adhering to modern security standards for identity management.
- [SAFE]: Security best practices are documented as core requirements, such as ensuring auth files on disk are restricted with
0o600permissions and implementing a "fail-closed" network gate that prevents attaching bearer tokens until verification by the API server. - [SAFE]: The instructions explicitly discourage dangerous patterns, such as leaking transport tokens into application code, reintroducing insecure legacy authentication methods (e.g., local email/password without verification), or clearing local storage solely due to network failures.
Audit Metadata