oidc-hosted-page-nextjs
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
openid-clientlibrary from the NPM registry, which is a standard, well-known package for OIDC integrations.\n- [EXTERNAL_DOWNLOADS]: The implementation performs an OIDC discovery request and authentication flow targeting the MojoAuth official domain (mojoauth.com), which is the expected behavior for integrating this vendor's services.\n- [PROMPT_INJECTION]: The skill was analyzed for indirect prompt injection surfaces where external data is ingested. Ingestion points:app/api/auth/callback/route.ts(receives OIDC parameters and userinfo). Boundary markers: None. Capability inventory: Safe (limited to logging and redirection). Sanitization: None. No dangerous sinks were identified.\n- [CREDENTIALS_UNSAFE]: The skill correctly instructs the use of environment variables (.env.local) for managing sensitive credentials like the Client Secret, using placeholders (your_client_secret) in documentation to prevent exposure.
Audit Metadata