auth-scaffold

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive templates for authentication configuration, middleware, and UI components using established libraries like Auth.js and Prisma.
  • [SAFE]: Secret management is handled correctly by instructing the user to use environment variables (AUTH_SECRET, AUTH_GOOGLE_ID, etc.) in a .env.local file rather than hardcoding them.
  • [SAFE]: The generated authentication logic includes input validation via Zod (loginSchema.safeParse(credentials)) and secure password comparison using bcrypt.compare.
  • [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized remote code execution attempts were detected in the instructions or the provided assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 03:49 PM