workos-authkit-nextjs
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the official WorkOS GitHub repository (github.com/workos/authkit-nextjs). This is a trusted vendor resource and the operation is used to ensure the agent uses up-to-date and accurate integration instructions.
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands including
ls,grep, andfindto verify the project's file structure and configuration. It also suggests runningnpm run buildto confirm a successful integration, which is an expected operation in a software development context. - [CREDENTIALS_UNSAFE]: The skill references environment variables such as
WORKOS_API_KEYandWORKOS_COOKIE_PASSWORD. It correctly provides guidance on storing these in.env.localand describes the expected formats (e.g., thesk_prefix for secret keys) without hardcoding or attempting to exfiltrate any actual credentials.
Audit Metadata