openevidence-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for implementing security controls (RBAC, SSO, Audit Logging) within the OpenEvidence ecosystem. All code snippets provided are for instructional and implementation reference.
- [SAFE]: Secret management practices are followed. The code uses environment variables (e.g.,
process.env.SESSION_SECRET) and configuration objects rather than hardcoding sensitive credentials. - [SAFE]: Authentication strategies utilize well-known, industry-standard libraries including
passport-samlandpassport-openidconnect. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were found. Network operations are directed towards legitimate API endpoints (
OE_API). - [SAFE]: The skill correctly scopes its functionality within the allowed tools (Read, Write, Edit, Grep) and focuses on healthcare compliance (HIPAA) documentation.
Audit Metadata