skills/firegoat-ai/skills/agent-auth/Gen Agent Trust Hub

agent-auth

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses expect and noninteractive (via npx) to automate navigation through interactive terminal prompts, surveys, and TUI-based pickers during CLI login processes.
  • [EXTERNAL_DOWNLOADS]: CLI binaries and installation scripts are downloaded from official sources, including Turso's installation domain (get.tur.so), Fly.io's documentation links, and GitHub releases for Auth0 and Render.
  • [REMOTE_CODE_EXECUTION]: Recommends the execution of remote installation scripts (e.g., curl | bash for Turso), which aligns with the official setup procedures for the referenced developer tools.
  • [DATA_EXFILTRATION]: Identifies local configuration file paths (such as ~/.workos/credentials.json or ~/.modal.toml) for managing authentication states and verifying identity, while explicitly instructing the agent never to scrape or copy token values.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 02:17 AM