clerk-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code and documentation for official Clerk authentication components and hooks (@clerk/nextjs), which is a standard industry practice for SaaS applications.- [SAFE]: The instructions for environment variable configuration recommend using .env.local for sensitive keys like NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY, which aligns with security best practices for avoiding hardcoded secrets.- [SAFE]: The provided React components and Next.js routes implement standard OAuth and MFA flows without any detected attempts at data exfiltration, command injection, or persistence mechanisms.- [SAFE]: External links point to official Clerk documentation and social login providers, which are well-known and trusted services.
Audit Metadata