implementing-saaskit-nextjs
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for web authentication, such as using HttpOnly and Secure cookies to prevent XSS-based token theft.
- [SAFE]: It implements CSRF protection using a state parameter in the OAuth flow and validates the
nextredirect parameter to prevent open redirect attacks. - [SAFE]: All external references are to official vendor resources or well-known, industry-standard libraries.
- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. Network operations are limited to standard authentication requests to the provider and local API routes.
- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables for sensitive configuration like client secrets and does not contain hardcoded credentials.
Audit Metadata