auth0-react
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup process includes downloading the Auth0 CLI from the official Auth0 GitHub repository (github.com/auth0/auth0-cli), which is a trusted source for this vendor's tooling.
- [COMMAND_EXECUTION]: The skill provides Bash and PowerShell scripts to automate Auth0 application creation and configuration. These scripts are focused on legitimate setup tasks and include user confirmation steps before performing file operations.
- [REMOTE_CODE_EXECUTION]: A piped installation method is used for the Auth0 CLI (curl | sh). This is a standard and safe deployment pattern when sourced from the official, verified repository of a well-known service like Auth0.
- [CREDENTIALS_UNSAFE]: The skill implements best practices for credential management by using environment variables (.env) and explicitly warns users to avoid exposing secrets to the agent context, reducing the risk of accidental data exposure.
Audit Metadata