signalr
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide for SignalR, providing standard patterns for hubs, clients, and server configuration without any malicious instructions.
- [SAFE]: Includes a dedicated 'Security' section in the best practices, correctly advising on the use of
[Authorize]attributes, JWT authentication via query strings for WebSockets, and HTTPS enforcement. - [SAFE]: The anti-patterns documentation explicitly warns against security vulnerabilities such as 'Not Validating Hub Method Inputs' and 'Exposing ORM Entities Directly', which are common vectors for injection and data exposure.
- [SAFE]: All external references point to official Microsoft documentation (learn.microsoft.com), and the internal references provide valid architectural advice.
- [SAFE]: No evidence of prompt injection, obfuscation, unauthorized command execution, or data exfiltration was found during the analysis.
Audit Metadata