oauth
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The implementation follows OAuth 2.1 best practices by using Authorization Code Flow with PKCE (S256) and mandatory state validation to prevent CSRF attacks.\n- [SAFE]: The skill correctly instructs on JWT validation, enforcing checks for expiration (exp), issuer (iss), and audience (aud) claims as per RFC 7519.\n- [SAFE]: Secret management is handled securely via environment variables, avoiding hardcoded credentials.\n- [SAFE]: All referenced Node.js packages are official plugins from the Fastify ecosystem maintainers.
Audit Metadata