two-factor
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content, UX patterns, and code snippets for implementing 2FA systems. Comprehensive analysis of both SKILL.md and references/pattern.md revealed no malicious instructions, prompt injections, or unauthorized data access patterns. The mentioned Node.js packages (input-otp, @simplewebauthn/browser, and otplib) are industry-standard libraries for authentication. The skill correctly identifies and recommends security best practices, such as encryption of TOTP secrets at rest, rate limiting, and providing recovery flows with backup codes.
Audit Metadata