Is `robot.auth` undefined when you aren't using the hubot-auth script? If that's the case, this might read a bit better:

    if not robot.auth? or robot.auth.isAdmin(msg.envelop.user)