create-auth

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is instructed to automatically execute database migrations using the user's project-specific database driver and connection once the authentication code has been generated.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's project files during the initial stack detection phase. 1. Ingestion points: The agent scans local configuration files such as package.json, go.mod, and prisma/schema.prisma (Step 1). 2. Boundary markers: Not explicitly defined for the file scanning process. 3. Capability inventory: The skill has the capability to write multiple source code files (Step 5) and execute database migrations (Step 6). 4. Sanitization: While the skill includes rigorous validation rules for user inputs, it does not specifically sanitize the content of the project files used for stack detection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:11 PM