implementing-scalekit-nextjs-auth
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational template and implementation guide for developers using the Scalekit authentication platform.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known libraries from official registries, including
@scalekit-sdk/node(the vendor's official SDK),jose,date-fns, andjs-cookie. These are expected dependencies for the stated purpose. - [CREDENTIALS_UNSAFE]: The environment variable section uses clearly labeled placeholders like
your-client-idandyour-client-secret. No actual secrets or hardcoded credentials are provided. - [DATA_EXFILTRATION]: All network operations and redirects described are restricted to the local development environment (
localhost:3000) or the vendor's infrastructure (scalekit.io), which is consistent with the skill's purpose. - [PROMPT_INJECTION]: No malicious instructions intended to override agent behavior or bypass safety filters were detected.
- [SAFE]: The skill includes security best practices, such as CSRF state validation, the use of HttpOnly/SameSite cookie attributes, and warnings about validating redirect parameters to prevent open redirect vulnerabilities.
Audit Metadata