backend-websocket-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides code snippets and reference patterns for setting up WebSocket servers using the ws and socket.io libraries. These are standard architectural examples for real-time communication.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates best practices for credential management, explicitly stating that secrets should never be in code and should be managed via environment variables or secret managers. Code examples use placeholders like process.env.JWT_SECRET and process.env.REDIS_URL.
  • [EXTERNAL_DOWNLOADS]: The skill references standard package installation patterns for well-known libraries such as socket.io, @socket.io/redis-adapter, and ws. These are industry-standard dependencies for the skill's stated purpose.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The provided code is for local server implementation and does not involve fetching and executing remote scripts.
  • [DATA_EXFILTRATION]: No data exfiltration patterns were detected. Network operations are restricted to the intended purpose of WebSocket server communication and Redis pub/sub for scaling.
  • [PROMPT_INJECTION]: The instructions are focused on guiding the agent to produce consistent architectural documentation and do not contain bypass or override patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 08:00 PM
Security Audit — agent-trust-hub — backend-websocket-patterns