clerk-auth
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code patterns for Clerk authentication that align with industry best practices.
- The webhook implementation includes signature verification using the svix library, preventing unauthorized or spoofed payloads.
- The environment variable examples use safe placeholders (e.g., sk_test_...) rather than exposing actual credentials.
- The logic included in the 'Validation Checks' section is designed to help developers identify common security mistakes in their own code, such as exposing secret keys to the client or missing middleware protection.
Audit Metadata