add-api-auth

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads official SDKs for Node.js, Python, Go, and Java from standard package registries and official repositories (e.g., github.com/scalekit-inc/scalekit-sdk-go/v2).
  • [COMMAND_EXECUTION]: Provides instructions to execute package installation commands including pip install, go get, and npm install to setup the required authentication libraries.
  • [SAFE]: Implements strict security guardrails that prohibit hardcoding sensitive credentials, requiring the use of environment variables (SCALEKIT_CLIENT_ID, SCALEKIT_CLIENT_SECRET) for configuration.
  • [SAFE]: Mandates server-side validation for all incoming tokens and provides guidance on secure secret management, such as limiting the exposure of plain-text secrets to a single instance and storing non-sensitive identifiers for token lifecycle management.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 08:09 AM
Security Audit — agent-trust-hub — add-api-auth