phoenix-channels-essentials
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the analyzed files.
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior or bypass safety guidelines. Instructions are focused on technical implementation and best practices.
- [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. The skill correctly demonstrates token-based authentication using standard Phoenix frameworks.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private keys were found. The code uses placeholders like
window.userTokenfor demonstration purposes. - [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts. It provides static Elixir and JavaScript code snippets for local application development.
- [OBFUSCATION]: No obfuscation techniques such as Base64-encoded commands, zero-width characters, or homoglyphs were used.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a high awareness of this risk. Rule 7 explicitly mandates treating client payloads as untrusted and forbids passing them to the LLM context, which mitigates the risk of processing malicious data from third parties.
Audit Metadata