auth-security-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill provides reference implementations for security audits, correctly distinguishing between insecure and secure practices for session management, JWT handling, and password security. It correctly guides users to avoid hardcoded secrets by using environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose involves reviewing external code, which constitutes an ingestion point for untrusted data. However, the skill provides static reference content rather than automated execution tools, and it does not perform network or filesystem operations, maintaining a safe profile. The capability inventory is limited to providing instructional code blocks for the agent to use as audit criteria.
Audit Metadata