auth-implementation-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for secure software development. The instructions and resources focus on implementing standard security controls (RBAC, JWT, OAuth2).
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or credentials were found. All code samples correctly demonstrate the use of environment variables (e.g.,
process.env.JWT_SECRET,process.env.GOOGLE_CLIENT_ID) for sensitive configurations. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js libraries for its implementation patterns, including
jsonwebtoken,bcrypt,passport, andexpress-rate-limit. All represent legitimate, industry-standard choices for the stated purpose. - [REMOTE_CODE_EXECUTION]: No remote code execution or arbitrary command execution patterns were found. The code provided is instructional and intended for template-based generation by the agent.
Audit Metadata