auth-server-primitives
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and reference implementations for authentication. It correctly identifies and warns against common security pitfalls, such as trusting client-side route guards for data security or exposing user enumeration vulnerabilities in password reset flows.
- [SAFE]: Implementation examples follow established security standards, including secure cookie configuration (HttpOnly, Secure, SameSite, and __Host- prefix), PKCE for OAuth flows, and CSRF protection via Origin header validation.
- [SAFE]: No malicious patterns such as prompt injection, unauthorized data access, credential exfiltration, or obfuscation were identified. Dependencies are limited to well-known libraries from the TanStack ecosystem.
Audit Metadata