authentik
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and configuration resource for the Authentik identity provider. It contains no executable code or malicious instructions.
- [EXTERNAL_DOWNLOADS]: Refers to official and well-known sources for deployment, such as the Authentik Helm repository (charts.goauthentik.io) and Google Fonts (fonts.googleapis.com). These references are documented neutrally as they pertain to the skill's primary purpose.
- [CREDENTIALS_UNSAFE]: Adheres to secure credential management practices by using clear placeholders (e.g.,
<client-secret>,<password>,<base64-encoded-client-secret>) and providing commands for users to generate their own secure keys (e.g.,openssl rand -base64 32). - [COMMAND_EXECUTION]: Documents standard administrative CLI operations for Kubernetes (
kubectl exec) and Helm, which are necessary for the deployment and maintenance of the Authentik service as intended by the skill's purpose. - [REMOTE_CODE_EXECUTION]: Mentions the use of Python expressions within Authentik's Property Mappings and Blueprints. This is documented as a native feature of the Authentik platform for attribute mapping and does not involve executing untrusted remote code.
Audit Metadata