ros2-web-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely instructional and provides high-quality guidance on building secure robot-web bridges. It includes dedicated sections on TLS termination, token-based authentication (JWT), and CORS restrictions to ensure secure deployments.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of untrusted data from web clients (e.g., teleoperation commands and REST API parameters). It proactively mitigates this risk by demonstrating best practices such as input validation using Pydantic schemas and numerical clamping for velocity commands to prevent physical robot misuse.- [OBFUSCATION]: Base64 encoding is correctly used for its intended purpose of streaming compressed image data to browsers within data URIs, which is standard web practice and not an attempt to conceal malicious instructions.- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential handling by using placeholders for environment variables and referencing standard system paths for SSL certificates, rather than hardcoding sensitive information.
Audit Metadata