make-app-auth
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed guidance for the secure integration of the @qfeius/make-app-auth SDK, prioritizing unified login and robust session management over insecure token-based alternatives.
- [SAFE]: A diagnostic Node.js tool (audit-auth-contract.mjs) is included to perform static security and contract auditing of local project files; it does not perform network operations or execute untrusted remote code.
- [SAFE]: The instructions explicitly prohibit insecure patterns, such as hardcoding credentials, accessing sensitive configuration files from browser code, or trusting unvalidated client-provided host headers.
- [SAFE]: External references and dependencies are limited to well-known services and vendor-verified resources (e.g., official NPM registry and @qfeius vendor packages).
Audit Metadata