sa-token-sso
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and reference resource for implementing Single Sign-On (SSO) using the Sa-Token framework. It provides Java code snippets, YAML configurations, and front-end integration examples that follow standard security practices for the referenced library.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and source code from the official and well-known Sa-Token GitHub repository (
github.com/dromara/sa-token). These references are for documentation purposes and do not involve the execution of untrusted remote scripts. - [COMMAND_EXECUTION]: No shell commands, subprocess executions, or dynamic context injections (
!command) were found in the skill files. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or exfiltration. The network addresses mentioned (e.g.,
sso-server.com,localhost) are used as placeholders for local development and configuration examples. - [CREDENTIALS_UNSAFE]: The skill includes common placeholder credentials (e.g.,
admin/123456) and placeholder keys (e.g.,mySecretKey) within documentation examples, which is standard practice for tutorials and does not constitute a security risk.
Audit Metadata