token-storage-security
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is an educational resource and checklist for security best practices. It provides legitimate code examples for Next.js and frontend applications to implement secure cookie-based authentication.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external authentication implementations and source code. This represents a data ingestion surface; however, the skill lacks any execution capabilities or dangerous tools (such as shell access or network requests) that could be exploited by malicious content within the analyzed code. The instructions are limited to identifying and flagging specific patterns (e.g.,
localStorage.setItem).
Audit Metadata