implement-saaskit
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a template for implementing OIDC authentication. It provides standard, secure patterns for handling authorization codes and session management.
- [DATA_EXPOSURE]: The instructions mandate the use of environment variables for storing client secrets and environment URLs, which is a standard security practice. It also explicitly forbids storing sensitive tokens in
localStorage. - [EXTERNAL_DOWNLOADS]: The skill references official SDKs from the vendor (@scalekit-sdk/node, scalekit-sdk-go, scalekit-sdk-java) and trusted community packages (cookie-parser, Gin, Spring Boot Security). These are documented as necessary dependencies for the integration.
- [INDIRECT_PROMPT_INJECTION]: While the skill handles external inputs like OAuth codes and state parameters, it provides robust guardrails including mandatory server-side validation and state checks to prevent common web vulnerabilities.
Audit Metadata