auth

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Executes a Node.js one-liner to generate RS256 key pairs for JWT authentication. This approach is used to ensure a non-interactive, headless setup process.
  • [COMMAND_EXECUTION]: Uses package managers and CLI tools (such as pnpm, npx convex, and npx shadcn) to install project dependencies, manage UI components, and update environment variables on the deployment server.
  • [EXTERNAL_DOWNLOADS]: Fetches standard development dependencies including the jose library and vendor-specific packages like @convex-dev/auth from official package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 08:24 PM
Security Audit — agent-trust-hub — auth