clerk-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate security guidance for implementing Clerk authentication in Next.js. It includes templates for verifying webhook signatures using Svix, configuring Content Security Policy (CSP) headers, and protecting API routes with proper authorization checks.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides code templates and instructions that the agent incorporates into its operational context. While the instructions promote secure practices, the agent's output could be influenced by untrusted data if the skill is used to process malicious user inputs.\n
- Ingestion points: Instructional content and code snippets in
SKILL.mdandreferences/implementation-guide.md.\n - Boundary markers: The skill uses Markdown formatting (headers and code blocks) to delimit instructions and templates.\n
- Capability inventory: The skill is permitted to use
Read,Write,Edit, andGreptools to interact with the filesystem.\n - Sanitization: The templates explicitly recommend and demonstrate input validation and sanitization for API requests.
Audit Metadata