nextauth-authentication

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
1
Flagged
1
Chunks
2
Flagged Files (1)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: nextauth-authentication description: Guidelines for implementing NextAuth.js (Auth.js v5) authentication in Next.js applications with session management and security best practices --- # NextAuth Authentication You are an expert in NextAuth.js (Auth.js v5) authentication implementation.

Tool: SKILL.md [2/2] Description: module 'next-auth/jwt' { interface JWT extends DefaultJWT { id: string; role: string; } } ``` ### Role Check Utility ```typescript import { auth } from '@/auth'; export async function requireRole(allowedRoles: string[]) { const session = await auth(); if (!session?.user) { throw new Error('Unauthorized'); } if (!allowedRoles.includes(session.user.role)) { throw new Error('Forbidden'); } return session; } // Usage export default async function AdminPage() { const

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
1
Files Flagged
1
Chunks Analyzed
2
Analyzed
Feb 21, 2026, 08:49 PM
Security Audit — runlayer — nextauth-authentication