auth-identity
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides industry-standard security practices and does not contain malicious code or instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill describes systems that ingest untrusted user credentials and tokens. 1. Ingestion points: Code snippets handle external input from HTTP requests in login and authentication flows. 2. Boundary markers: The implementation uses cryptographic challenges and typed responses to delimit data. 3. Capability inventory: Includes network calls for token validation and database operations for credential persistence. 4. Sanitization: The skill relies on reputable libraries like jose and @simplewebauthn/server for secure parsing and validation.
Audit Metadata