NYC

api-authentication

Pass

Audited by Gen Agent Trust Hub on Feb 15, 2026

Risk Level: LOW
Full Analysis
  • [SAFE] (INFO): The skill demonstrates standard authentication flows including JWT, OAuth 2.0, and API keys. All libraries used (bcrypt, jsonwebtoken, flask-jwt-extended) are industry standards.
  • [CREDENTIALS_UNSAFE] (LOW): The code snippets use placeholder strings for secrets (e.g., 'your-secret-key', 'secret-key'), which are explicitly identified as placeholders for the user to replace with environment variables.
  • [INDIRECT_PROMPT_INJECTION] (INFO): The skill serves as a template library and does not ingest untrusted data into an execution environment.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 15, 2026, 10:18 PM