websockets
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for receiving and processing messages from remote clients over WebSocket connections, which constitutes an ingestion point for untrusted data.\n
- Ingestion points: Untrusted data enters the application through the
messageevent handler in the provided Node.js and browser-based client code examples withinSKILL.md.\n - Boundary markers: The code examples do not demonstrate the use of delimiters or specific instructions to the agent to treat incoming socket data as untrusted content.\n
- Capability inventory: The skill demonstrates capabilities for network communication using the
wslibrary and database interaction viaredis.\n - Sanitization: The provided logic echoes and broadcasts messages without explicit validation, filtering, or sanitization of the payload content.
Audit Metadata