api-auth-key-management
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill advocates for industry-standard security practices, including SHA-256 hashing for irretrievable keys, constant-time comparison to prevent timing attacks, and mandatory entropy floors for generated secrets.
- [SAFE]: External URLs and references to vendors like GitHub, Stripe, and AWS are used exclusively for architectural benchmarking and illustrating established security programs like GitHub's Secret Scanning.
- [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found in the skill's instructions or reference materials.
Audit Metadata