stream-react
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides security-conscious instructions for SDK integration, specifically advising against hardcoding credentials and recommending server-side token management.
- [EXTERNAL_DOWNLOADS]: Instructions include fetching documentation and configuration from official vendor sources (getstream.io and GitHub). These are trusted resources within the GetStream ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies the risks of processing agent-generated data and provides mitigation steps, such as validating tool arguments and requiring user consent for actions.
- [COMMAND_EXECUTION]: Development workflows utilize the 'getstream' CLI for app setup and documentation retrieval, which is standard for this vendor's tools.
Audit Metadata