real-time-collab
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as documentation for implementing collaborative editing features. It highlights security best practices, such as setting
resourceTypeto ensure proper access scoping and implementing payload limits to prevent resource exhaustion. - [EXTERNAL_DOWNLOADS]: The skill recommends installing standard, well-known TipTap and Yjs extensions (
@tiptap/extension-collaboration,@tiptap/extension-collaboration-caret,@tiptap/y-tiptap, and@tiptap/core) via thepnpmpackage manager. These are widely recognized industry-standard libraries for handling CRDT-based editing. - [PROMPT_INJECTION]: The collaborative editing architecture described allows an AI agent to edit documents alongside human users as a peer editor. This creates a surface where the agent processes and reconciles content that includes untrusted data from human participants.
- Ingestion points: Document content and Y.Doc state are retrieved from internal SQL tables and routes (e.g.,
/_agent-native/collab/:docId/state) as described inSKILL.md. - Boundary markers: The skill does not define specific prompt delimiters for the content being processed, relying on the structured ProseMirror/Yjs format to separate fields.
- Capability inventory: The skill facilitates document modifications through routes such as
search-replace,jsonpatching, and text updates as detailed inSKILL.md. - Sanitization: While the document emphasizes CRDT consistency and resource scoping, it does not explicitly describe content-level sanitization or verification of human-inputted text before agent processing.
Audit Metadata