a6-plugin-hmac-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate configuration guide for Apache APISIX security plugins.
- [DATA_EXPOSURE]: The skill includes placeholder credentials (e.g., 'alice-secret-key-value') in documentation examples. These are standard pedagogical values and do not represent a credential leak.
- [COMMAND_EXECUTION]: The skill uses the 'a6' CLI tool to manage APISIX resources. These commands are intended to be executed by the user or an agent acting on the user's behalf to configure the gateway.
- [DYNAMIC_EXECUTION]: A Python script is provided as a documentation example to illustrate how clients should compute HMAC signatures. This is a static code block for educational purposes and is not executed automatically by the skill context.
Audit Metadata