enterprise-identity-provider
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a professional implementation guide for enterprise identity management, providing architectural patterns and technical documentation.
- [EXTERNAL_DOWNLOADS]: Python implementation templates use standard libraries (
requests,PyJWT) to interact with identity provider endpoints. These operations are restricted to user-defined OIDC and SCIM URLs, which is expected behavior for an identity integration tool. - [COMMAND_EXECUTION]: No arbitrary command execution, shell spawning, or suspicious subprocess calls were identified. The code samples are focused on application-level logic for identity protocols.
- [CREDENTIALS_UNSAFE]: The skill demonstrates a strong security posture by explicitly instructing against storing secrets in code, recommending 90-day rotation for client secrets, and encouraging the use of managed identities. No hardcoded API keys or credentials were found in the templates.
Audit Metadata