skills/immamdouhaboammar/antigravity-superpowers/agency-identity-access-engineer/Gen Agent Trust Hub
agency-identity-access-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively promotes established security standards (OAuth 2.0, OIDC, SAML 2.0, SCIM, WebAuthn) and explicitly forbids insecure practices like hand-rolling cryptography or token formats.
- [SAFE]: Code examples correctly implement security controls, such as verifying
stateandnonceparameters to prevent CSRF and replay attacks, and usingPKCEfor authorization code flows. - [SAFE]: The skill uses safe patterns for secret management, instructing the use of environment variables (
process.env.OIDC_CLIENT_ID) rather than hardcoded credentials. - [SAFE]: References to the
@simplewebauthn/serverlibrary are appropriate for implementing WebAuthn and are consistent with the skill's stated purpose.
Audit Metadata