auth0-nuxt
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill recommends installing '@auth0/auth0-nuxt' from the npm registry without specifying or pinning a version, which constitutes an unverifiable dependency according to strict security analysis standards.
- COMMAND_EXECUTION (INFO): The skill provides instructions to run 'openssl rand -hex 64' locally to generate cryptographic secrets, which is an industry-standard practice for secure session management.
- PROMPT_INJECTION (MEDIUM): The skill implements logic for handling untrusted external data which creates an indirect prompt injection surface. 1. Ingestion points: The '/auth/callback' route and 'useAuth0(event)' composable process external Auth0 responses. 2. Boundary markers: No explicit boundary markers or 'ignore' instructions are used when interpolating tokens or user data into logic. 3. Capability inventory: The skill utilizes 'sendRedirect', '$fetch', and 'createError' in server-side handlers. 4. Sanitization: Relies on the external SDK's internal validation rather than local sanitization.
Audit Metadata