skills/jeremylongshore/tons-of-skills-marketplace/validating-authentication-implementations/Gen Agent Trust Hub
validating-authentication-implementations
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to audit security controls. The instructions and bundled Python scripts (authentication_check.py, jwt_analyzer.py, password_policy_check.py) implement logic for static analysis of authentication patterns, JWT claims, and password policies without performing any dangerous operations like network exfiltration, arbitrary command execution, or persistence mechanisms.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted codebase content, creating an indirect prompt injection surface. This is evaluated as safe given the skill's specific purpose and lack of exploitable network or execution capabilities.\n
- Ingestion points: Scanning of external target codebase and configuration files via Grep and Glob tools (SKILL.md, authentication_check.py).\n
- Boundary markers: Absent; the agent is instructed to scan the code directly.\n
- Capability inventory: Read, Write, Edit, Grep, Glob, and platform-defined scoped Bash (security/scan/audit) tools.\n
- Sanitization: Analysis is performed using static logic, standard JSON parsing, and regular expressions.
Audit Metadata