a6-plugin-basic-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses example credentials (
alice-password-123) and Base64 encoded strings for educational purposes. These are clearly documented as placeholders for a tutorial and do not represent hardcoded secrets or credential exfiltration. - [COMMAND_EXECUTION]: The skill uses the
a6CLI tool andcurlto manage API gateway resources (routes, consumers, credentials) and verify connectivity. These operations are local, expected for an administrative skill, and align with the skill's stated purpose. - [DATA_EXPOSURE_AND_EXFILTRATION]: Network operations are limited to
curlcommands targeting127.0.0.1:9080(localhost). This is safe behavior for testing local API gateway configurations. - [METADATA_POISONING]: The metadata fields correctly describe the skill's function and the required APISIX version, with no deceptive instructions or injection patterns found in the YAML frontmatter.
Audit Metadata