webauthn
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install standard, reputable libraries for authentication from official registries, including @simplewebauthn/server, @simplewebauthn/browser, and py_webauthn.
- [COMMAND_EXECUTION]: Standard package management commands (npm install, pip install) are provided for environment setup.
- [INDIRECT_PROMPT_INJECTION]: The skill provides code that processes external data from users. It follows security best practices by using library-provided verification methods to validate credentials, signatures, and challenges. Ingestion points include request bodies for registration and login; sanitization is performed via verification functions; capabilities include session token issuance.
Audit Metadata