fastcomments-sso
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill defines a secure authentication flow using HMAC-SHA256 to sign user data, providing clear warnings about keeping the API secret server-side. It correctly identifies the risk of credential leakage if the secret is exposed to the browser.
- [EXTERNAL_DOWNLOADS]: The skill references official vendor resources for documentation and code examples, including domains like
fastcomments.com,docs.fastcomments.com, and the GitHub organizationgithub.com/FastComments. These are legitimate resources owned by the skill's author. - [REMOTE_CODE_EXECUTION]: The skill mentions official integration libraries, such as the PHP package
fastcomments/ssoand a Dart SDK component. These are standard, vendor-provided dependencies required for the single sign-on functionality and do not represent a security risk.
Audit Metadata