sa-token
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation, code examples, and configuration templates for the Sa-Token framework. No malicious code, obfuscation, or unauthorized access patterns were detected. All provided Java snippets follow standard security practices for authentication and authorization.
- [EXTERNAL_DOWNLOADS]: The skill references official and well-known resources, including the Sa-Token project's official GitHub repository (dromara/sa-token) and documentation site (sa-token.cc). It instructs users to download standard libraries from the official Maven Central repository using the legitimate 'cn.dev33' group ID.
- [CREDENTIALS_UNSAFE]: The documentation includes hardcoded strings for secret keys and credentials (e.g., 'sa:123456' and a demo signing key 'kQwIOrYvnXmSDkwEiFngrKidMcdrgKor'). These are clearly identified as placeholder values for demonstration and educational purposes in the context of framework configuration examples and do not constitute a security risk.
Audit Metadata