p-eng-clerk-auth
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches user profile data from Clerk's official API (api.clerk.com) to perform sync-on-demand profile provisioning. This is a standard integration with a well-known identity provider.
- [COMMAND_EXECUTION]: Provides instructions for installing standard, well-known Node.js packages such as @nestjs/passport, passport-jwt, and jwks-rsa for authentication handling.
- [CREDENTIALS_UNSAFE]: Appropriately recommends the use of environment variables (e.g., CLERK_SECRET_KEY, BACKEND_INTERNAL_API_KEY) for managing sensitive secrets rather than hardcoding them in the source code.
Audit Metadata