add-openai-streaming-rn
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused instructional guide for developers. It does not contain executable malicious patterns, obfuscation, or unauthorized data access commands.
- [EXTERNAL_DOWNLOADS]: The provided code templates reference the official
@supabase/serverpackage from npm. This is a well-known service used for backend functionality. - [INDIRECT_PROMPT_INJECTION]: The backend implementation examples include defensive programming patterns, such as validating message roles ('system', 'user', 'assistant') and enforcing strict character length limits on user-provided content to mitigate injection risks.
- [DATA_EXPOSURE_EXFILTRATION]: The instructions explicitly warn against including sensitive provider keys in client-side code and provide secure alternatives using server-side secret storage.
Audit Metadata