netlify-identity
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages authentication and user metadata, which creates an attack surface where untrusted data could influence agent behavior.\n
- Ingestion points: User data is ingested via the signup() and login() methods in SKILL.md, and URL hash parameters are processed by handleAuthCallback() in SKILL.md and references/advanced-patterns.md.\n
- Boundary markers: There are no explicit delimiters or instructions to treat user-provided data as untrusted when used in further logic.\n
- Capability inventory: The skill utilizes powerful administrative functions like admin.listUsers() and admin.updateUser() in SKILL.md that operate on the user database.\n
- Sanitization: The skill recommends using verifyRequestOrigin(req) for CSRF protection in SKILL.md, but it does not specify sanitization for user metadata processed by administrative tools.
Audit Metadata