java-authentication-security
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides defensive programming guidelines for Java authentication, correctly prioritizing the use of Spring Security and identity providers over custom implementations.
- [SAFE]: Security best practices for password storage, session management, and Multi-Factor Authentication (MFA) are accurately described, including mitigations for account enumeration and session fixation.
- [SAFE]: External references point to well-known and trusted official documentation sources, including the Spring Framework (docs.spring.io), OWASP, and NIST (pages.nist.gov).
- [SAFE]: The skill highlights specific, valid technical risks such as the 72-byte limit of the Bcrypt password encoder and the differences between UTF-16 code units and Unicode code points in Java.
Audit Metadata