auth0-flask
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The automated setup script in
references/setup.mddownloads the official Auth0 CLI from the vendor's GitHub repository. This is a trusted resource from a well-known service and follows standard installation patterns. - [COMMAND_EXECUTION]: The skill provides utility scripts for environment setup and automated testing.
references/setup.mdexecutes shell commands to install the CLI and configure application settings, whiletests/run-evals.mjsruns shell operations for file management and agent evaluation. These commands are transparently implemented and necessary for the developer workflow. - [DATA_EXPOSURE]: The evaluation tool
tests/run-evals.mjsscans source files, including.envfiles, to grade the integration's correctness. While this involves reading sensitive file paths, it is a localized operation within the testing environment and is used to verify that credentials have been correctly placed by the agent. The skill includes explicit warnings to the user regarding the handling of environment files. - [CREDENTIALS_SAFE]: The documentation and code snippets strictly adhere to best practices for secret management, instructing users to utilize environment variables for all sensitive configuration and providing guidance on generating secure session secrets.
Audit Metadata