spectacles-auth
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides template code for standard OAuth2 flows.
- [DATA_EXFILTRATION]: The skill manages sensitive data (OAuth2 access and refresh tokens) by storing them in the device's local persistent storage (GeneralDataStore). It transmits these tokens only to developer-configured OAuth2 endpoints for token exchange and refresh operations, which is the expected and necessary behavior for an authentication library.
- [COMMAND_EXECUTION]: The skill utilizes built-in platform modules (
DeepLinkModuleandInternetModule) for opening system browsers and making HTTP requests. These operations are performed within the standard permission model of the target environment. - [CREDENTIALS_UNSAFE]: No hardcoded API keys, secrets, or credentials were found in the skill. The code uses appropriate placeholders and prompts developers to provide their own configuration.
Audit Metadata