api-auth-nextauth
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and code templates for Auth.js implementation. It does not include any executable scripts or network operations performed by the skill itself.
- [SAFE]: The examples correctly handle sensitive data, using placeholders for environment variables like AUTH_SECRET and recommending secure practices like password hashing with bcryptjs and input validation with zod to prevent injection and credential exposure.
- [SAFE]: The skill provides specific guidance on preventing common vulnerabilities, such as open redirects in the redirect callback and token leakage in the session callback by keeping sensitive OAuth tokens server-side.
- [SAFE]: Dependencies mentioned, including next-auth, @auth/prisma-adapter, @auth/drizzle-adapter, bcryptjs, zod, and resend, are well-known, established libraries from trusted sources.
Audit Metadata