authentication
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure implementation templates for authentication using industry-standard libraries like Auth.js (NextAuth). It correctly utilizes server-only imports and server-side session resolution to prevent client-side authorization bypasses.
- [SAFE]: No hardcoded credentials or secrets were identified. The code snippets appropriately use environment variables (e.g.,
env.AUTH_SECRET) for sensitive configurations. - [SAFE]: The instructions include proactive security advice, such as warning against trusting client-side authentication state, generic error messaging to prevent email enumeration, and the use of httpOnly cookies.
Audit Metadata