authentication
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and code templates for implementing robust authentication flows using standard libraries and best practices.
- [SAFE]: Secure handling of sensitive data is emphasized through the use of hashing (bcrypt for passwords, SHA-256 for tokens), session-based state management, and field protection in database models.
- [SAFE]: The skill implements standard security measures such as rate limiting for magic links, silent failure for forgot-password requests to prevent email enumeration, and short-lived tokens for sensitive actions.
- [SAFE]: All identified dependencies and external references (e.g., SimpleWebAuthn, Sails.js documentation, Speakeasy) are reputable, well-known libraries or official documentation within the JavaScript and security ecosystems.
Audit Metadata