websocket-engineer
Fail
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a technical reference and provides high-quality code examples for building secure real-time systems. It explicitly encourages the use of environment variables for sensitive data like JWT secrets and Redis connection strings.
- [EXTERNAL_DOWNLOADS]: The workflow suggests using
npx wscatfor local testing. This utility is a standard industry tool for debugging WebSocket connections and is retrieved from the official npm registry. - [SAFE]: Security is a core focus of the provided references, which include detailed implementations for CORS configuration, XSS protection using the
sanitize-htmllibrary, and DDoS mitigation through connection limiting. - [SAFE]: Automated scanner flags for the documentation URLs (
jeffallan.github.io) were analyzed. These links direct users to the author's supplementary documentation hosted on GitHub Pages, which is a reputable and well-known platform.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata