websocket-engineer
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a legitimate technical reference for WebSocket engineering. All provided code examples use standard architectural patterns for Node.js environments.
- [SAFE]: No malicious patterns such as prompt injection, credential exfiltration, or unauthorized remote code execution were found. The skill correctly instructs the use of environment variables (e.g.,
JWT_SECRET,REDIS_URL) for managing sensitive configuration. - [SAFE]: The skill includes an extensive security reference (
references/security.md) that explicitly teaches best practices for securing real-time systems, including JWT authentication, CORS configuration, input validation using Joi, and XSS protection using sanitize-html. - [SAFE]: Dependencies referenced in the code examples and documentation are well-known, established libraries within the Node.js ecosystem, such as Socket.IO, Redis, and Express.
Audit Metadata