implementing-saaskit
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed instructions for implementing authentication flows (OAuth2/OIDC) and explicitly mandates security guardrails such as server-side JWT validation, the use of HttpOnly and Secure cookies, and the prevention of hardcoded credentials.
- [EXTERNAL_DOWNLOADS]: The skill references official SDKs and well-known libraries from trusted ecosystems, including 'github.com/scalekit-inc/scalekit-sdk-go/v2', 'com.scalekit:scalekit-sdk-java', 'firebase/php-jwt', and standard Spring Boot/Gin dependencies. These are legitimate resources provided by the vendor (scalekit-inc) or reputable open-source maintainers.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The documentation correctly instructs users to provide credentials via environment variables and uses standard placeholders (e.g., '') for demonstration.
- [COMMAND_EXECUTION]: Shell commands provided are limited to standard package management operations (go get, composer require, mvn) and environment setup instructions.
Audit Metadata