clerk-auth

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured implementation patterns for Clerk authentication, specifically targeting Next.js App Router applications.
  • [SAFE]: It emphasizes critical security practices, such as mandatory signature verification for webhooks using the svix library to prevent unauthorized data synchronization.
  • [SAFE]: The documentation includes guidance on mitigating authentication bypass vulnerabilities, such as CVE-2025-29927, by recommending redundant authentication checks within route handlers and server components.
  • [SAFE]: The skill provides validation checks to prevent common developer errors, such as hardcoding API keys or exposing the CLERK_SECRET_KEY to client-side code through incorrect environment variable naming.
  • [SAFE]: It demonstrates correct multi-tenancy patterns by encouraging the use of orgId for scoping database queries, which prevents cross-organization data leakage.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:51 PM
Security Audit — agent-trust-hub — clerk-auth