auth-scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive templates for authentication configuration, middleware, and UI components using established libraries like Auth.js and Prisma.
- [SAFE]: Secret management is handled correctly by instructing the user to use environment variables (
AUTH_SECRET,AUTH_GOOGLE_ID, etc.) in a.env.localfile rather than hardcoding them. - [SAFE]: The generated authentication logic includes input validation via Zod (
loginSchema.safeParse(credentials)) and secure password comparison usingbcrypt.compare. - [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized remote code execution attempts were detected in the instructions or the provided assets.
Audit Metadata