blink-realtime
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates processing messages from WebSocket channels, which creates a surface where instructions from external sources can enter the agent's context.
- Ingestion points: Data enters via the
blink.realtime.subscribeandchannel.onMessagehandlers described inSKILL.md. - Boundary markers: The documentation does not specify the use of delimiters or 'ignore' instructions to separate incoming message data from system instructions.
- Capability inventory: The skill includes the
blink_realtime_publishtool, which allows the agent to write back to channels based on processed input. - Sanitization: No sanitization, validation, or filtering of the incoming
dataobject is mentioned in the provided examples.
Audit Metadata