formio-auth
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed entirely of informational markdown files that provide guidance on Form.io authentication mechanisms such as OIDC, SAML, LDAP, and Custom JWT. No executable code, shell commands, or malicious scripts are present.
- [NO_CODE]: As a documentation-only skill, it does not include any automated tools or background scripts that could pose a security risk to the agent environment.
- [SAFE]: All external libraries and services mentioned (e.g., 'jsonwebtoken', '@formio/js', 'jwt.io') are industry-standard resources that align with the skill's primary purpose of identity management.
- [SAFE]: The documentation follows security best practices by recommending the use of environment variables for secrets like 'JWT_SECRET' and encouraging the use of secure protocols like LDAPS.
Audit Metadata