lazycat-auth-integration
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation set for platform-specific security configurations, providing guidance on OIDC and SSO. It does not contain any executable code, only instructions for developers.
- [COMMAND_EXECUTION]: The documentation describes the use of the
hcCLI tool for generating API tokens. This is presented as a legitimate administrative task to be performed via SSH by the user, not an automated or hidden malicious execution. - [CREDENTIALS_UNSAFE]: References to sensitive OIDC credentials use environment variable placeholders such as
${LAZYCAT_AUTH_OIDC_CLIENT_SECRET}following security best practices for configuration templates instead of hardcoding actual secrets. - [EXTERNAL_DOWNLOADS]: Mentions container images from
registry.lazycat.cloud, which is the official registry for the platform described, and references toheiyu.spacefor OIDC issuer information, both of which are consistent with the vendor's own infrastructure.
Audit Metadata