auth-testing
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is designed for local development and testing of OAuth2 and OIDC flows. All documented network interactions and service endpoints are restricted to
localhost(specifically ports 3000, 8081, 8889, and 7233). - [COMMAND_EXECUTION]: The skill includes instructions for running local development scripts via
pnpmand testing authentication endpoints usingcurl. These commands are safe as they target local services for debugging purposes and do not involve remote code execution or unauthorized access. - [PROMPT_INJECTION]: The skill describes an environment that handles authentication tokens and session cookies. Ingestion points: Browser cookies (
refresh,user0) and local configuration files (with-auth.yaml). Boundary markers: The instructions reference server-side JWT validation and the use of HttpOnly cookies to protect sensitive data. Capability inventory: Local network requests to authentication and refresh endpoints. Sanitization: The documented process relies on standard OIDC protocols and JWT validation checks within the local server logic as described in the debugging section.
Audit Metadata