jwt-authentication
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides well-structured code templates for .NET authentication that adhere to modern security standards, including token rotation, HttpOnly cookies, and SHA256 hashing for stored refresh tokens.
- [CREDENTIALS_UNSAFE]: The templates include placeholders for secret keys and sensitive configuration, but they are clearly marked as placeholders and are accompanied by explicit warnings to use secure storage solutions like Azure Key Vault or AWS Secrets Manager in production.
- [DATA_EXFILTRATION]: No network operations, unauthorized data access, or exfiltration patterns were identified within the provided templates.
- [REMOTE_CODE_EXECUTION]: The skill consists entirely of static C# code templates and does not include any mechanisms for downloading or executing remote code.
Audit Metadata