sa-token-integration

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation, configuration examples, and dependency information for the Sa-Token framework.
  • [DATA_EXPOSURE]: No sensitive data exposure detected. While the skill includes example configurations for Redis and JWT, they use non-functional placeholders or keyboard-mash strings (e.g., jwt-secret-key: asdasdasifhueuiwyurfewbfjsdafjk, password: xxxx) for demonstration purposes.
  • [EXTERNAL_DOWNLOADS]: The skill references official Sa-Token documentation on GitHub. These are links to well-known service repositories and do not involve remote code execution.
  • [OBFUSCATION]: The examples include a sample JWT token, which is a standard format for the technology described. Decoding the token reveals typical test data (loginId: 10001). No malicious hidden payloads or obfuscated URLs were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:38 AM