clerk
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard npm and npx commands to interact with official Clerk CLI tools (@clerk/cli) for authentication setup and environment variable management.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download official packages from the public npm registry. Clerk is a well-known and established authentication service provider.
- [CREDENTIALS_UNSAFE]: The skill describes pulling environment variables, including the CLERK_SECRET_KEY, into a local .env.local file. This is consistent with standard, secure secret management practices for the described service and does not involve hardcoding secrets or exfiltration.
Audit Metadata