clerk-auth
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured implementation patterns for Clerk authentication, specifically targeting Next.js App Router applications.
- [SAFE]: It emphasizes critical security practices, such as mandatory signature verification for webhooks using the
svixlibrary to prevent unauthorized data synchronization. - [SAFE]: The documentation includes guidance on mitigating authentication bypass vulnerabilities, such as CVE-2025-29927, by recommending redundant authentication checks within route handlers and server components.
- [SAFE]: The skill provides validation checks to prevent common developer errors, such as hardcoding API keys or exposing the
CLERK_SECRET_KEYto client-side code through incorrect environment variable naming. - [SAFE]: It demonstrates correct multi-tenancy patterns by encouraging the use of
orgIdfor scoping database queries, which prevents cross-organization data leakage.
Audit Metadata