backend-websocket-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure documentation and pattern enforcement tool. It provides reference code for Node.js (ws and socket.io) following security best practices.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials detected. The references correctly advise using environment variables and secrets managers for tokens and keys.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or external download commands are present. All code snippets are provided as static text for the user to implement.
- [PROMPT_INJECTION]: The skill uses typical instructional language ('Do NOT use for...', 'Always use...') consistent with its role as an architectural guide. No override or bypass markers were detected.
- [DATA_EXFILTRATION]: No network-calling tools or data exfiltration patterns were found. The skill does not access sensitive files.
Audit Metadata