netlify-identity
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of
@netlify/identityand@netlify/functionsfrom the official npm registry. These are legitimate packages provided by a trusted organization for building applications on their platform. - [INDIRECT_PROMPT_INJECTION]: This skill handles user-supplied data during authentication and profile management, which is an inherent characteristic of its intended purpose.
- Ingestion points: Untrusted data enters the agent context through the
signup(),login(), andupdateUser()methods, as well as through Identity event handlers likeuserSignupinSKILL.md. - Boundary markers: The documentation does not specify explicit boundary delimiters for user-provided metadata strings, which is standard for this type of API usage.
- Capability inventory: The skill utilizes
admin.updateUser()and role-based redirects to modify and enforce access control. - Sanitization: The skill provides explicit instructions to use
verifyRequestOrigin()to prevent CSRF attacks and emphasizes performing role checks server-side on every request to prevent client-side bypasses.
Audit Metadata