nextauth-authentication

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard implementation patterns for authentication using Auth.js v5. It uses appropriate placeholders for sensitive configuration (e.g., your-32-byte-secret-here) and follows industry best practices by recommending server-side validation and CSRF protection.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external OAuth providers and user credentials. Although this constitutes a data ingestion surface, the instructions specifically guide the user to implement sanitization and validation measures, such as using bcrypt for password comparison and server-side session checks, which aligns with secure development practices.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known libraries such as next-auth, @auth/prisma-adapter, and bcryptjs via npm. These are industry-standard dependencies for the stated purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:29 PM