netlify-identity
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
@netlify/identityand@netlify/functionsfrom npm, which are official packages maintained by Netlify. - [COMMAND_EXECUTION]: Provides standard shell commands for package installation and mentions server-side administrative operations that are scoped to the privileged Netlify Functions runtime.
- [CREDENTIALS_UNSAFE]: Includes explicit security warnings against hardcoding secrets, client IDs, or OAuth tokens, promoting the use of the Netlify dashboard for secure configuration management.
- [INDIRECT_PROMPT_INJECTION]: Documentation covers the processing of user-supplied data such as emails and metadata, which represents a standard ingestion surface for authentication and authorization logic.
- [SAFE]: The skill emphasizes security best practices, including mandatory CSRF protection via
verifyRequestOriginand the isolation of administrative capabilities to server-side environments.
Audit Metadata