integration-privy
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a standard integration process for Privy and Solana Mobile Wallet Adapter (MWA) without suspicious behavior or unauthorized access patterns.- [SAFE]: Explicit security guidance is provided regarding the handling of sensitive credentials. It correctly identifies EXPO_PUBLIC_ variables as public and strictly warns against including the PRIVY_APP_SECRET in the mobile application bundle.- [SAFE]: The instructions for server-side verification include critical security checks for JWTs, such as validating the audience and issuer claims, which prevents cross-application token reuse attacks.- [SAFE]: External references and dependencies are limited to well-known service providers (Privy, Expo, TanStack) and the author's official GitHub repositories.
Audit Metadata