implement-access-control
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for implementing secure access control using the
@scalekit-sdk/nodelibrary, which is a verified vendor package belonging to the skill author (scalekit-inc). - [SAFE]: Hardcoded credentials are avoid; instructions explicitly direct the agent to read sensitive configuration such as
SCALEKIT_CLIENT_IDandSCALEKIT_CLIENT_SECRETfrom environment variables. - [SAFE]: The middleware implementation follows security best practices by requiring server-side validation of JWT tokens using the official SDK (
scalekit.validateToken) rather than insecure manual decoding. - [SAFE]: The skill enforces a default-deny security posture by returning a 403 Forbidden status when required roles or permissions are missing, and ensures that authentication middleware is executed before authorization checks.
- [SAFE]: All external URLs for documentation and management tools (e.g., app.scalekit.com, docs.scalekit.com) are legitimate vendor-owned domains.
Audit Metadata