oRPC Client Event Iterator

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains only documentation and standard code snippets for library usage. No malicious behavior, obfuscation, or sensitive data access was found.\n- [EXTERNAL_DOWNLOADS]: References the @orpc/client library in example code. This is a standard dependency for the functionality described in the skill instructions.\n- [PROMPT_INJECTION]: The skill defines a data ingestion surface for event streams. While this presents a theoretical indirect prompt injection surface if processing untrusted content, the provided examples do not use any high-risk capabilities (such as file writes or subprocess execution) that would allow for exploitation.\n
  • Ingestion points: client.streaming() in SKILL.md\n
  • Boundary markers: Absent\n
  • Capability inventory: None (the snippets only use console.log)\n
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 08:12 AM
Security Audit — agent-trust-hub — oRPC Client Event Iterator