building-websocket-server
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates security-by-design for real-time services, recommending JWT-based authentication during the handshake phase and heartbeats to detect timeouts and prevent resource exhaustion.
- [EXTERNAL_DOWNLOADS]: The skill references established, well-known libraries such as 'ws', 'socket.io', 'websockets', and 'FastAPI', all of which are official packages from trusted ecosystems.
- [PROMPT_INJECTION]: The skill utilizes an indirect prompt injection surface by reading and grepping existing local project files to determine the integration architecture.
- Ingestion points: Step 1 uses Read and Grep tools to examine existing HTTP server configurations.
- Boundary markers: No delimiters or specific instructions are provided to the agent to distinguish between configuration data and potential embedded instructions within files.
- Capability inventory: The agent has Write, Edit, and Bash tools available, which could be leveraged if the agent inadvertently follows instructions found in local files.
- Sanitization: The skill does not include steps to sanitize or validate the content of the files read before processing.
Audit Metadata