websocket-engineer

Fail

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill serves as a technical reference and provides high-quality code examples for building secure real-time systems. It explicitly encourages the use of environment variables for sensitive data like JWT secrets and Redis connection strings.
  • [EXTERNAL_DOWNLOADS]: The workflow suggests using npx wscat for local testing. This utility is a standard industry tool for debugging WebSocket connections and is retrieved from the official npm registry.
  • [SAFE]: Security is a core focus of the provided references, which include detailed implementations for CORS configuration, XSS protection using the sanitize-html library, and DDoS mitigation through connection limiting.
  • [SAFE]: Automated scanner flags for the documentation URLs (jeffallan.github.io) were analyzed. These links direct users to the author's supplementary documentation hosted on GitHub Pages, which is a reputable and well-known platform.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 27, 2026, 03:03 AM