Skills
Navigate
skills/scalekit-inc/authstack/manage-saaskit-sessions/Gen Agent Trust Hub

manage-saaskit-sessions

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides implementation guidelines for session management that align with security best practices.\n
  • Recommends HttpOnly, Secure, and SameSite: Lax cookie attributes.\n
  • Instructs against storing access tokens in localStorage.\n
  • Emphasizes the use of scoped paths for cookies (e.g., /api for access tokens, /auth/refresh for refresh tokens) to reduce exposure.\n- [SAFE]: External references target official documentation and tools from a recognized vendor (Scalekit).\n
  • Fetches session timeout configuration from docs.scalekit.com.\n
  • References official LLM-friendly documentation (docs.scalekit.com/llms.txt) and MCP servers (mcp.scalekit.com).\n- [SAFE]: Secret management practices are sound.\n
  • The code examples use process.env for environment variables (SCALEKIT_CLIENT_SECRET, etc.) rather than hardcoding credentials.\n- [SAFE]: The skill includes explicit instructions for error handling, such as returning 401 status codes when authentication or refresh operations fail, preventing unauthorized request continuation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 08:06 AM
Security Audit — agent-trust-hub — manage-saaskit-sessions