umbraco-security-2fa
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a member-facing two-factor authentication system which ingests untrusted data (email, password, and TOTP codes) through partial views rendered on the website.
- Ingestion points: The files
assets/MemberLogin.cshtmlandassets/TwoFactorSetup.cshtmlcollect user-provided credentials and authentication codes. - Boundary markers: No explicit delimiters are used in the prompt construction, as the skill relies on standard Umbraco and ASP.NET Core form processing for security boundaries.
- Capability inventory: The
assets/MemberTwoFactorController.cscomponent performs account state modifications (enabling or disabling 2FA) through theIMemberTwoFactorLoginService. - Sanitization: The implementation uses standard framework protections including
[ValidateAntiForgeryToken]and structured validation of operation status results from Umbraco's core security services. - [SAFE]: The skill explicitly follows security best practices by generating TOTP QR codes locally as
data:URIs rather than using external chart services, preventing the exposure of authentication secrets to third parties. - [SAFE]: The skill includes security hardening by providing the
BlockUncheckedTwoFactorActionsFilter, which proactively disables Umbraco's default unchecked 2FA routes to prevent session-based bypasses.
Audit Metadata