cavuno-board-server-sessions

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for implementing session management and authentication using the @cavuno/board/server package. It explicitly encourages security best practices including the use of httpOnly, Secure, and SameSite=Lax cookie flags for session persistence.
  • [SAFE]: Includes specific guidance on mitigating Open Redirect vulnerabilities by using safeRedirectPath for user-supplied redirect URLs and currentPathFromReferer for deriving return paths from the Referer header. These functions are presented as necessary security controls for handling redirects.
  • [EXTERNAL_DOWNLOADS]: The skill references the @cavuno/board/server Node.js package and provides a link to documentation at cavuno.com/docs/sdk. These external references are consistent with the skill's primary purpose of providing integration instructions for the Cavuno platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 02:07 AM
Security Audit — agent-trust-hub — cavuno-board-server-sessions