implementing-access-control
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for implementing access control. It follows security best practices by instructing the developer to validate tokens server-side before trusting claims and to enforce permissions at route boundaries.
- [SAFE]: No hardcoded credentials or sensitive data exposure patterns were detected. The skill correctly references environment variables and local configuration for secret management.
- [SAFE]: The provided command-line examples (curl) are used for local testing against localhost and do not involve remote code execution or data exfiltration.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation techniques were identified.
Audit Metadata