http-https
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a high-quality educational resource for networking protocols and follows established security best practices such as enforcing TLS 1.2+, using HSTS, and managing secrets via environment variables.- [INDIRECT_PROMPT_INJECTION]: The provided code examples for HTTP and WebSocket servers represent a standard attack surface for indirect prompt injection as they are designed to ingest and parse untrusted data from external clients.
- Ingestion points: Body parsing logic in Node.js (SKILL.md), request context parsing in Python (SKILL.md), and WebSocket event handlers in TypeScript (SKILL.md).
- Boundary markers: Absent, which is typical for low-level networking implementation examples.
- Capability inventory: Includes HTTP client/server networking, WebSocket communication, and file system checks for TLS certificates.
- Sanitization: The snippets utilize standard JSON parsing; however, they do not include specialized sanitization logic for data that might be subsequently passed to an LLM context.
Audit Metadata