add-api-auth
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strong security guardrails by explicitly forbidding the hardcoding of sensitive credentials such as
SCALEKIT_CLIENT_SECRET. It mandates reading these from environment variables and instructs the user to update their.envfile. - [SAFE]: Data handling practices are secure; the skill requires that tokens/secrets are displayed only once during creation and explicitly warns against logging or committing these secrets to version control.
- [SAFE]: The authentication logic enforces server-side validation on every request and requires appropriate HTTP 401 responses for invalid, expired, or revoked tokens.
- [EXTERNAL_DOWNLOADS]: The skill references and installs official vendor packages including
@scalekit-sdk/node,scalekit-sdk-python,github.com/scalekit-inc/scalekit-sdk-go/v2, andcom.scalekit:scalekit-sdk-java. These are all legitimate resources owned by the authoring organization (scalekit-inc). - [SAFE]: URL references for documentation and API endpoints (e.g.,
app.scalekit.com,docs.scalekit.com) are consistent with the vendor's official domain infrastructure.
Audit Metadata