salvo-session

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill's implementation examples contain a hardcoded 64-byte secret key string. While this is used as a functional placeholder to satisfy the SessionHandler builder requirement, hardcoding cryptographic secrets in source code is an insecure practice that can lead to vulnerabilities if the example is copied directly into production environments.
  • Evidence in SKILL.md: b"secretabsecretabsecretabsecretabsecretabsecretabsecretabsecretab"
  • [EXTERNAL_DOWNLOADS]: The skill requires the salvo crate as a primary dependency to enable session features. This is a standard dependency for the framework being documented.
  • Evidence in SKILL.md: salvo = { version = "0.94.0", features = ["session"] }
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 04:30 PM