nextjs-authentication
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard authentication patterns using the Auth.js (NextAuth.js) library, which is a reputable and widely-used solution for Next.js applications.
- [SAFE]: No hardcoded credentials or sensitive data exposure patterns were detected. All configuration examples use environment variable placeholders and best-practice storage methods like .env.local.
- [EXTERNAL_DOWNLOADS]: Instructs the user to install well-known and trusted packages (NextAuth, Prisma, Drizzle, and bcryptjs) from the official npm registry.
- [SAFE]: Security best practices are explicitly encouraged, such as verifying authentication within Server Actions, using HTTP-only cookies, and implementing Middleware for route protection.
- [SAFE]: The skill correctly warns against common pitfalls like performing database queries in Edge-runtime Middleware or attempting to set cookies in Server Components.
Audit Metadata