Privy
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All referenced URLs and API endpoints target the official vendor domain (privy.io), which is consistent with the skill's stated purpose of integrating with the Privy platform.
- [SAFE]: Code snippets for SDK initialization use standard placeholders for sensitive credentials (e.g., 'your-app-secret') and include explicit instructions to store these values securely using environment variables rather than hardcoding them.
- [SAFE]: The skill includes a 'Verification checklist' and 'Common gotchas' section that proactively addresses security concerns such as webhook signature verification, sensitive data logging, and policy enforcement.
- [SAFE]: The documented Node.js and React packages (@privy-io/node, @privy-io/react-auth) are official libraries provided by the vendor for platform integration.
Audit Metadata