oauth-2-0-setup
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill follows industry best practices for authentication implementation.
- [COMMAND_EXECUTION]: The provided code examples utilize standard networking libraries (Node.js
fetchand Pythonrequests) to interact with OAuth providers. These operations are essential for the skill's stated purpose of implementing authentication flows. - [EXTERNAL_DOWNLOADS]: The examples demonstrate integration with well-known and trusted services, specifically Google's OAuth endpoints. These references are documented neutrally as part of the implementation guidance.
- [PROMPT_INJECTION]: The skill's instructions are focused on technical implementation and do not contain any patterns indicative of intent to override agent constraints or bypass safety guidelines.
- [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration were found. The skill correctly demonstrates using environment variables for sensitive credentials and secure session storage for tokens.
Audit Metadata