Security audit
Auth0 React
Security checks across malware telemetry and agentic risk
Overview
This deprecated Auth0 React skill only tells users to install the replacement Auth0 skill and does not contain hidden execution or unsafe behavior.
This skill is outdated; install the replacement `auth0` skill instead. Review the replacement skill separately before using it, especially because Auth0 work can involve authentication settings and credentials.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
