testland/auth0-tests
Use when an app uses Auth0 and needs tests for its tenant config, login flows or Action scripts: per-PR or namespaced tenants, Universal Login, PKCE, client credentials, Rules and Hooks, and config drift with a0deploy. Generic OAuth flows are oauth-flow-test-author.
89%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill references `ghcr.io/navikt/mock-oauth2-server:0.5.10` as a Docker container runtime dependency to be executed during testing, but this third-party GitHub Container Registry image lacks strong first-party provenance, making it a medium-tier operational dependency.
Where we found it
ghcr.io/navikt/mock-oauth2-server:0.5.10
dependency · 1 site
The skill explicitly instructs users to execute this third-party Docker image from GitHub Container Registry as part of the mock OIDC server testing alternative (Step 7).
SKILL.md
197
docker run -p 8080:8080 ghcr.io/navikt/mock-oauth2-server:0.5.10
- Audited
- Security analysis