oauth-2-0-setup
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements and advocates for modern OAuth 2.0 security standards such as Proof Key for Code Exchange (PKCE) and State parameters to prevent authorization code interception and CSRF attacks.
- [SAFE]: Code examples follow security best practices by using environment variables (
process.env,os.environ) for client secrets and sensitive configuration instead of hardcoding credentials. - [SAFE]: Instructions correctly emphasize secure storage (HTTP-only cookies, system keychains) and token rotation to minimize the risk of token leakage or misuse.
- [SAFE]: No obfuscation, remote code execution, or privilege escalation patterns were found in the instructions or provided code snippets.
Audit Metadata