salvo-session
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill's implementation examples contain a hardcoded 64-byte secret key string. While this is used as a functional placeholder to satisfy the
SessionHandlerbuilder requirement, hardcoding cryptographic secrets in source code is an insecure practice that can lead to vulnerabilities if the example is copied directly into production environments. - Evidence in
SKILL.md:b"secretabsecretabsecretabsecretabsecretabsecretabsecretabsecretab" - [EXTERNAL_DOWNLOADS]: The skill requires the
salvocrate as a primary dependency to enable session features. This is a standard dependency for the framework being documented. - Evidence in
SKILL.md:salvo = { version = "0.94.0", features = ["session"] }
Audit Metadata