cavuno-board-server-sessions
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for implementing session management and authentication using the
@cavuno/board/serverpackage. It explicitly encourages security best practices including the use ofhttpOnly,Secure, andSameSite=Laxcookie flags for session persistence. - [SAFE]: Includes specific guidance on mitigating Open Redirect vulnerabilities by using
safeRedirectPathfor user-supplied redirect URLs andcurrentPathFromRefererfor deriving return paths from the Referer header. These functions are presented as necessary security controls for handling redirects. - [EXTERNAL_DOWNLOADS]: The skill references the
@cavuno/board/serverNode.js package and provides a link to documentation atcavuno.com/docs/sdk. These external references are consistent with the skill's primary purpose of providing integration instructions for the Cavuno platform.
Audit Metadata