backend-websocket-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides code snippets and reference patterns for setting up WebSocket servers using the
wsandsocket.iolibraries. These are standard architectural examples for real-time communication. - [CREDENTIALS_UNSAFE]: The skill correctly demonstrates best practices for credential management, explicitly stating that secrets should never be in code and should be managed via environment variables or secret managers. Code examples use placeholders like
process.env.JWT_SECRETandprocess.env.REDIS_URL. - [EXTERNAL_DOWNLOADS]: The skill references standard package installation patterns for well-known libraries such as
socket.io,@socket.io/redis-adapter, andws. These are industry-standard dependencies for the skill's stated purpose. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The provided code is for local server implementation and does not involve fetching and executing remote scripts.
- [DATA_EXFILTRATION]: No data exfiltration patterns were detected. Network operations are restricted to the intended purpose of WebSocket server communication and Redis pub/sub for scaling.
- [PROMPT_INJECTION]: The instructions are focused on guiding the agent to produce consistent architectural documentation and do not contain bypass or override patterns.
Audit Metadata