nextauth-authentication
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for authentication using Auth.js v5. It uses appropriate placeholders for sensitive configuration (e.g.,
your-32-byte-secret-here) and follows industry best practices by recommending server-side validation and CSRF protection. - [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external OAuth providers and user credentials. Although this constitutes a data ingestion surface, the instructions specifically guide the user to implement sanitization and validation measures, such as using
bcryptfor password comparison and server-side session checks, which aligns with secure development practices. - [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known libraries such as
next-auth,@auth/prisma-adapter, andbcryptjsvianpm. These are industry-standard dependencies for the stated purpose of the skill.
Audit Metadata