skills/agusmdev/burntop/fastapi-auth/Gen Agent Trust Hub

fastapi-auth

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements secure credential management by using the Argon2 hashing algorithm for user passwords and generating high-entropy session identifiers via the secrets module, adhering to industry best practices.
  • [EXTERNAL_DOWNLOADS]: The GoogleOAuth service communicates with official Google Identity endpoints (accounts.google.com and googleapis.com) to facilitate secure token exchange and retrieve user profile information. These interactions are necessary for the skill's stated purpose and target trusted domains.
  • [DATA_EXFILTRATION]: The OAuth callback route redirects to the frontend using a query parameter to transmit the session token. While this is a standard pattern for some client-side applications, it is documented neutrally as it poses a minor risk of exposure in browser history or server logs compared to HTTP-only cookies.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 10:30 PM