15Low
The skill performs unauthorized network operations and executes commands without declaring required capabilities, while relying on external, unverified documentation that poses a risk of runtime code injection.
HygienePackaging & Manifest3 findings
Skill Info
Nameauth0/agent-skills/auth0-nuxt
Registrygithub
Versionaacefa7dcbdf
PURLpkg:github/auth0/agent-skills@aacefa7dcbdf?skill=auth0-nuxt
Stars37
Installs511
Source
Install
GitHub
511 installs
Skills.shDocs
npx skills add https://github.com/auth0/agent-skillsAssessments (3)
AI Agent Traps ↗Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/examples.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Common Examples](./references/examples.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/route-protection.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[route-protection.md](./references/route-protection.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/session-stores.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[session-stores.md](./references/session-stores.md)
Outbound network request primitive in skill code — can transmit data externallylowdata exfiltrationAML.T0025AML.T0024LLM02:2025
Outbound network request primitive in skill code — can transmit data externally
95% confidenceline 6
fetch('https://api.example.com/data', {
headers: {
Authorization: `Bearer ${accessToken}`
}
})Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/auth0/agent-skills/auth0-nuxt)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/auth0/agent-skills/auth0-nuxt"><img src="https://mondoo.com/ai-agent-security/api/badge/github/auth0/agent-skills/auth0-nuxt.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/auth0/agent-skills/auth0-nuxt.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow