auth-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational templates and code snippets for authentication (NextAuth.js, JWT, RBAC). The instructions align with senior security engineering standards, emphasizing principles like 'Never Roll Your Own Crypto' and 'Principle of Least Privilege'.
- [EXTERNAL_DOWNLOADS]: The skill mentions standard package installation for well-known libraries (
next-auth@beta,@auth/prisma-adapter) from public registries. These are documented neutrally as part of the setup instructions. - [CREDENTIALS_UNSAFE]: The code snippets correctly utilize environment variables (
process.env.GOOGLE_CLIENT_ID,process.env.JWT_SECRET, etc.) for managing secrets rather than hardcoding credentials. - [DATA_EXFILTRATION]: No network operations or unauthorized data access patterns were found. Database interactions (via Prisma) and password comparisons (via bcryptjs) are performed locally within the application context.
Audit Metadata