skills/pingidentity/ping-sdk-agent-skills/ping-orchestration-reactjs-davinci-sdk/Gen Agent Trust Hub
ping-orchestration-reactjs-davinci-sdk
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill follows security best practices by instructing users to manage sensitive credentials like Client IDs and Discovery Endpoints through environment variables (.env) rather than hardcoding them into the application source code.
- [COMMAND_EXECUTION]: The skill includes a shell script
scripts/scaffold_auth.shdesigned to automate the creation of the project structure and copy template files. The script uses safe path resolution and standard file operations. - [EXTERNAL_DOWNLOADS]: The application templates depend on official Ping Identity packages (
@forgerock/davinci-client,@forgerock/oidc-client, and@forgerock/protect) from the public npm registry. These are well-known libraries for the intended authentication functionality.
Audit Metadata