setup-auth
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Authentication Implementation Support: The skill provides comprehensive documentation and boilerplate code for various authentication methods, including OpenID Connect and local sign-in, tailored for the Power Pages platform.
- Security Best Practices: The reference materials contain explicit warnings against insecure practices, such as hardcoding secrets, and provide guidance on using secure alternatives like Azure Key Vault.
- Report Sanitization: The report generation template includes an allowlist-based HTML sanitization function,
appendSafeMarkup, designed to mitigate potential cross-site scripting (XSS) risks from dynamic content. - Project Validation Logic: A validation script is included to automatically verify the existence and basic integrity of the authentication service and related components in the project structure.
- Development Affinity: The authentication service boilerplate supports a mock user mode, allowing for role-based UI testing in local development environments without requiring live server access.
Audit Metadata