reactive-programming
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates that process untrusted external data from user search inputs and WebSocket messages. This creates a potential surface for indirect prompt injection if the data processed by these reactive streams is subsequently used to influence agent instructions without sanitization.
- Ingestion points: Search input events in
references/search-with-debounce.mdand WebSocket message events inreferences/websocket-with-reconnection.md. - Boundary markers: Not explicitly defined in code templates.
- Capability inventory: Uses
fetchfor network requests andWebSocketfor real-time communication. - Sanitization: Includes basic JSON parsing error handling and debounce logic to limit frequency of operations.
Audit Metadata