clerk-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a standard developer resource for implementing data privacy features. It follows best practices by using environment variables for secret keys and provides clear instructions for sensitive operations like data export and account deletion.
- [DATA_EXPOSURE]: Data handling logic is restricted to the intended purpose of privacy compliance. The code snippets correctly distinguish between public and private metadata and include sanitization logic to remove internal database identifiers during data exports.
- [COMMAND_EXECUTION]: The skill requests standard development tools (Bash, Grep, npm) for its execution environment, which is consistent with its stated purpose of assisting in Next.js project implementation.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses the ingestion of user-controlled data (such as Clerk metadata) by providing structured code for processing and sanitizing that data before it is exported or used in the application UI, reducing the risk of downstream injection attacks.
Audit Metadata