web-auth
Provides authentication patterns for React applications, including login flows, OAuth, and session management.
Install this skill
or
91/100
Security score
The web-auth skill was audited on Mar 1, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 26
Fetch to external URL
SourceSKILL.md
| 26 | const response = await fetch('/api/auth/login', { |
low line 36
Fetch to external URL
SourceSKILL.md
| 36 | await fetch('/api/auth/logout', { |
low line 43
Fetch to external URL
SourceSKILL.md
| 43 | const response = await fetch('/api/auth/me', { |
low line 176
Fetch to external URL
SourceSKILL.md
| 176 | const result = await fetch('/api/auth/google', { |
low line 378
Fetch to external URL
SourceSKILL.md
| 378 | this.refreshPromise = fetch('/api/auth/refresh', { |
low line 159
Access to .env file
SourceSKILL.md
| 159 | client_id: process.env.NEXT_PUBLIC_GOOGLE_CLIENT_ID, |
low line 203
Access to .env file
SourceSKILL.md
| 203 | clientId: process.env.GOOGLE_CLIENT_ID!, |
low line 204
Access to .env file
SourceSKILL.md
| 204 | clientSecret: process.env.GOOGLE_CLIENT_SECRET!, |
low line 153
External URL reference
SourceSKILL.md
| 153 | script.src = 'https://accounts.google.com/gsi/client'; |
Scanned on Mar 1, 2026
View Security DashboardGitHub Stars 278
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
github-copilotchatgptclaude-codecursoropencodewindsurfclineroo-codeampgoosetraevibemanusantigravitygemini-clifrontendapicross-platformfrontend-developerproduct-managerdevelopmentproduct
aiskillstore/marketplace